| title | List fido2AuthenticationMethod |
|---|---|
| description | Retrieve a list of the fido2AuthenticationMethod objects and their properties. |
| author | hanki71 |
| ms.reviewer | intelligentaccesspm |
| ms.localizationpriority | medium |
| ms.subservice | entra-sign-in |
| doc_type | apiPageType |
| ms.date | 03/04/2026 |
Namespace: microsoft.graph
Retrieve a list of a user's passkey (FIDO2) authentication method objects and their properties.
[!INCLUDE national-cloud-support]
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-authentication-methods-apis-read-others]
Retrieve the details of your own FIDO2 authentication methods.
[!INCLUDE me-apis-sign-in-note]
GET /me/authentication/fido2MethodsRetrieve the details of your own or another user's FIDO2 authentication methods.
[!INCLUDE authentication-methods-apis-users-selfservice]
GET /users/{id | userPrincipalName}/authentication/fido2MethodsThis method does not support optional query parameters to customize the response.
| Name | Description |
|---|---|
| Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Don't supply a request body for this method.
If successful, this method returns a 200 OK response code and a collection of fido2AuthenticationMethod objects in the response body.
GET https://graph.microsoft.com/v1.0/me/authentication/fido2Methods[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
The following example shows the response.
Note: The response object shown here might be shortened for readability.
HTTP/1.1 200 OK
Content-type: application/json
{
"value": [
{
"id": "-2_GRUg2-HYz6_1YG4YRAQ2",
"displayName": "Red key",
"createdDateTime": "2020-08-10T06:44:09Z",
"aaGuid": "2fc0579f-8113-47ea-b116-555a8db9202a",
"model": "NFC key",
"attestationCertificates": [
"dbe793efdf1945e2df25d93653a1e8a3268a9075"
],
"attestationLevel": "attested",
"passkeyType": "deviceBound"
},
{
"id": "_jpuR-TGZgk6aQCLF3BQjA2",
"displayName": "Blue key",
"createdDateTime": "2020-08-10T06:25:38Z",
"aaGuid": "c5ef55ff-ad9a-4b9f-b580-ababafe026d0",
"model": "USB key",
"attestationCertificates": [
"b479e7652167f574296e76bfa76731b8ccd22ed7"
],
"attestationLevel": "attested",
"passkeyType": "deviceBound"
}
]
}