| title | authentication resource type |
|---|---|
| description | Exposes authentication method states for users and relationships that represent the authentication methods supported by Microsoft Entra ID. |
| author | jpettere |
| ms.reviewer | intelligentaccesspm |
| ms.localizationpriority | medium |
| ms.subservice | entra-sign-in |
| doc_type | resourcePageType |
| toc.title | Authentication states |
| ms.date | 01/06/2026 |
Namespace: microsoft.graph
Exposes authentication method states for users and relationships that represent the authentication methods supported by Microsoft Entra ID.
Inherits from entity.
None.
| Property | Type | Description |
|---|---|---|
| id | String | Unique identifier. Read-only. |
| Relationship | Type | Description |
|---|---|---|
| emailMethods | emailAuthenticationMethod collection | The email address registered to a user for authentication. |
| externalAuthenticationMethods | externalAuthenticationMethod collection | Represents the external MFA registered to a user for authentication using an external identity provider. |
| fido2Methods | fido2AuthenticationMethod collection | Represents the FIDO2 security keys registered to a user for authentication. |
| methods | authenticationMethod collection | Represents all authentication methods registered to a user. |
| microsoftAuthenticatorMethods | microsoftAuthenticatorAuthenticationMethod collection | The details of the Microsoft Authenticator app registered to a user for authentication. |
| operations | longRunningOperation collection | Represents the status of a long-running operation, such as a password reset operation. |
| passwordMethods | passwordAuthenticationMethod collection | Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password. |
| platformCredentialMethods | platformCredentialAuthenticationMethod collection | Represents a platform credential instance registered to a user on Mac OS. |
| phoneMethods | phoneAuthenticationMethod collection | The phone numbers registered to a user for authentication. |
| softwareOathMethods | softwareOathAuthenticationMethod collection | The software OATH time-based one-time password (TOTP) applications registered to a user for authentication. |
| temporaryAccessPassMethods | temporaryAccessPassAuthenticationMethod collection | Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes. |
| windowsHelloForBusinessMethods | windowsHelloForBusinessAuthenticationMethod collection | Represents the Windows Hello for Business authentication method registered to a user for authentication. |
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.authentication"
}