| title | Update qrPin |
|---|---|
| description | Create a new qrPin object. |
| author | jpettere |
| ms.date | 03/04/2025 |
| ms.localizationpriority | medium |
| ms.subservice | entra-sign-in |
| doc_type | apiPageType |
Namespace: microsoft.graph
Reset a user's PIN and generate a new temporary PIN that's represented by a qrPin object and is linked to the user's QR Code authentication method object.
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-authentication-methods-apis-write-others]
Reset your PIN and generate a new temporary PIN.
[!INCLUDE me-apis-sign-in-note]
PATCH /me/authentication/qrCodePinMethod/pinReset another user's PIN and generate a new temporary PIN.
[!INCLUDE authentication-methods-apis-users-selfservice]
PATCH /users/{id}/authentication/qrCodePinMethod/pin| Name | Description |
|---|---|
| Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
| Content-Type | application/json. Required. |
In the request body, supply a JSON representation of the qrPin object.
You can specify the following properties when creating a qrPin.
| Property | Type | Description |
|---|---|---|
| code | String | This code is accepted only while creating QR code authentication method. In PIN reset scenarios, this code is auto-generated by Entra. |
If successful, this method returns a 201 Created response code and a qrPin object in the response body.
The following example shows a request.
PATCH https://graph.microsoft.com/v1.0/users/7c4999f7-9c25-4f8e-8b84-766eb28a1b49/authentication/qrCodePinMethod/pin
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.qrPin",
"code": "09599786",
}The following example shows the response.
Note: The response object shown here might be shortened for readability.
HTTP/1.1 201 Created
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.qrPin",
"code": "09599786",
"forceChangePinNextSignIn": true,
"createdDateTime": "2025-03-04T22:45:37.2605385Z",
"updatedDateTime": "2025-03-04T22:45:37.2605385Z"
}