You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -59,6 +59,9 @@ Don't supply a request body for this method.
59
59
60
60
If successful, this method returns a `200 OK` response code and the requested [fido2AuthenticationMethod](../resources/fido2authenticationmethod.md) object in the response body.
61
61
62
+
> [!NOTE]
63
+
> This method also returns credentials key IDs formatted in Base64URL with a padding number suffix. To decode the key IDs, convert the trailing integer value of 0, 1, or 2 to the same number of base64 padding characters.
description: "Read the properties and relationships of a fido2AuthenticationMethodConfiguration object."
4
-
author: "calvinlui"
4
+
author: "hanki71"
5
5
ms.reviewer: intelligentaccesspm
6
6
ms.localizationpriority: medium
7
7
ms.subservice: "entra-sign-in"
8
8
doc_type: "apiPageType"
9
-
ms.date: 04/04/2024
9
+
ms.date: 03/04/2026
10
10
---
11
11
12
12
# Get fido2AuthenticationMethodConfiguration
13
13
Namespace: microsoft.graph
14
14
15
-
Retrieve the properties and relationships of the [fido2AuthenticationMethodConfiguration](../resources/fido2authenticationmethodconfiguration.md) object, which represents the FIDO2 Security Keys[authentication method policy](../resources/authenticationmethodspolicies-overview.md) for the Microsoft Entra tenant.
15
+
Retrieve the properties and relationships of the [fido2AuthenticationMethodConfiguration](../resources/fido2authenticationmethodconfiguration.md) object, which represents the passkey (FIDO2)[authentication method policy](../resources/authenticationmethodspolicies-overview.md) for the Microsoft Entra tenant.
description: "Update the properties of a fido2AuthenticationMethodConfiguration object."
4
-
author: "calvinlui"
4
+
author: "hanki71"
5
5
ms.reviewer: intelligentaccesspm
6
6
ms.localizationpriority: medium
7
7
ms.subservice: "entra-sign-in"
8
8
doc_type: "apiPageType"
9
-
ms.date: 04/04/2024
9
+
ms.date: 03/04/2026
10
10
---
11
11
12
12
# Update fido2AuthenticationMethodConfiguration
13
13
Namespace: microsoft.graph
14
14
15
-
Update the properties of a [fido2AuthenticationMethodConfiguration](../resources/fido2authenticationmethodconfiguration.md) object, which represents the FIDO2 Security Keys authentication method policy for the Microsoft Entra tenant.
15
+
Update the properties of a [fido2AuthenticationMethodConfiguration](../resources/fido2authenticationmethodconfiguration.md) object, which represents the passkey (FIDO2) authentication method policy for the Microsoft Entra tenant.
Copy file name to clipboardExpand all lines: api-reference/v1.0/resources/fido2authenticationmethod.md
+13-10Lines changed: 13 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,20 +1,20 @@
1
1
---
2
2
title: "fido2AuthenticationMethod resource type"
3
-
description: "A representation of a FIDO2 security key registered to a user. FIDO2 is a sign-in authentication method."
4
-
author: "calvinlui"
3
+
description: "A representation of a passkey (FIDO2) registered to a user. Passkey (FIDO2) is a sign-in authentication method."
4
+
author: "hanki71"
5
5
ms.reviewer: intelligentaccesspm
6
6
ms.localizationpriority: medium
7
7
ms.subservice: "entra-sign-in"
8
8
doc_type: resourcePageType
9
9
toc.title: FIDO2
10
-
ms.date: 07/24/2024
10
+
ms.date: 03/04/2026
11
11
---
12
12
13
13
# fido2AuthenticationMethod resource type
14
14
15
15
Namespace: microsoft.graph
16
16
17
-
A representation of a FIDO2 security key registered to a user. FIDO2 is a sign-in authentication method.
17
+
A representation of a passkey (FIDO2) registered to a user. Passkey (FIDO2) is a sign-in authentication method.
18
18
19
19
This is a derived type that inherits from the [authenticationMethod](authenticationmethod.md) resource type.
20
20
@@ -25,16 +25,18 @@ This is a derived type that inherits from the [authenticationMethod](authenticat
25
25
|[Get](../api/fido2authenticationmethod-get.md)|[fido2AuthenticationMethod](../resources/fido2authenticationmethod.md)|Read the properties and relationships of a user's **fido2AuthenticationMethod** object.|
26
26
|[Delete](../api/fido2authenticationmethod-delete.md)|None|Delete a user's **fido2AuthenticationMethod** object.|
27
27
28
+
28
29
## Properties
29
30
|Property|Type|Description|
30
31
|:---|:---|:---|
31
-
|aaGuid|String|Authenticator Attestation GUID, an identifier that indicates the type (e.g. make and model) of the authenticator.|
32
-
|attestationCertificates|String collection|The attestation certificate(s) attached to this security key.|
33
-
|attestationLevel|attestationLevel|The attestation level of this FIDO2 security key. The possible values are: `attested`, or `notAttested`.|
32
+
|aaGuid|String|Authenticator Attestation GUID, an identifier that indicates the type (such as make and model) of the authenticator.|
33
+
|attestationCertificates|String collection|The attestation certificate or certificates attached to this passkey.|
34
+
|attestationLevel|attestationLevel|The attestation level of this passkey (FIDO2). The possible values are: `attested`, `notAttested`, `unknownFutureValue`.|
34
35
|createdDateTime|DateTimeOffset|The timestamp when this key was registered to the user. Inherited from [authenticationMethod](../resources/authenticationmethod.md).|
35
36
|displayName|String|The display name of the key as given by the user.|
36
37
|id|String|The authentication method identifier.|
37
-
|model|String|The manufacturer-assigned model of the FIDO2 security key.|
38
+
|model|String|The manufacturer-assigned model of the FIDO2 passkey.|
39
+
|passkeyType|passkeyType|The type of passkey. The possible values are: `deviceBound`, `synced`, `unknownFutureValue`.|
38
40
39
41
## Relationships
40
42
None.
@@ -62,7 +64,8 @@ The following JSON representation shows the resource type.
description: "Represents a FIDO2 authentication methods policy."
4
-
author: "calvinlui"
4
+
author: "hanki71"
5
5
ms.reviewer: intelligentaccesspm
6
6
ms.localizationpriority: medium
7
7
ms.subservice: "entra-sign-in"
8
8
doc_type: resourcePageType
9
9
toc.title: FIDO2
10
-
ms.date: 07/22/2024
10
+
ms.date: 03/04/2026
11
11
---
12
12
13
13
# fido2AuthenticationMethodConfiguration resource type
@@ -23,24 +23,26 @@ Inherits from [authenticationMethodConfiguration](../resources/authenticationmet
23
23
|Method|Return type|Description|
24
24
|:---|:---|:---|
25
25
|[Get](../api/fido2authenticationmethodconfiguration-get.md)|[fido2AuthenticationMethodConfiguration](../resources/fido2authenticationmethodconfiguration.md)|Read the properties and relationships of a fido2AuthenticationMethodConfiguration object.|
26
-
|[Update](../api/fido2authenticationmethodconfiguration-update.md)|[fido2AuthenticationMethodConfiguration](../resources/fido2authenticationmethodconfiguration.md)|Update the properties of a fido2AuthenticationMethodConfiguration object.|
26
+
|[Update](../api/fido2authenticationmethodconfiguration-update.md)|None|Update the properties of a fido2AuthenticationMethodConfiguration object.|
27
27
|[Delete](../api/fido2authenticationmethodconfiguration-delete.md)|None|Reverts the fido2AuthenticationMethodConfiguration object to its default configuration.|
28
28
29
29
30
30
## Properties
31
31
|Property|Type|Description|
32
32
|:---|:---|:---|
33
+
|defaultPasskeyProfile|String|The non-deletable baseline passkey profile, within the passkey profile collection. It's automatically created when migrating to passkey profiles and initially mirrors the tenant's legacy global passkey (FIDO2) authentication methods policy settings.|
33
34
|excludeTargets|[excludeTarget](../resources/excludetarget.md) collection|Groups of users that are excluded from the policy.|
|isAttestationEnforced|Boolean|Determines whether attestation must be enforced for FIDO2 security key registration.|
36
-
|isSelfServiceRegistrationAllowed|Boolean|Determines if users can register new FIDO2 security keys.|
37
-
|keyRestrictions|[fido2KeyRestrictions](../resources/fido2keyrestrictions.md)|Controls whether key restrictions are enforced on FIDO2 security keys, either allowing or disallowing certain key types as defined by Authenticator Attestation GUID (AAGUID), an identifier that indicates the type (for example, make and model) of the authenticator.|
36
+
|isAttestationEnforced|Boolean|Determines whether attestation must be enforced for passkey (FIDO2) registration. This property is deprecated and will be removed in October 2027. Use **passkeyProfiles** property.|
37
+
|isSelfServiceRegistrationAllowed|Boolean|Determines if users can register new passkeys (FIDO2).|
38
+
|keyRestrictions|[fido2KeyRestrictions](../resources/fido2keyrestrictions.md)|Controls whether key restrictions are enforced on passkeys (FIDO2), either allowing or disallowing certain key types as defined by Authenticator Attestation GUID (AAGUID), an identifier that indicates the type (for example, make and model) of the authenticator. This property is deprecated and will be removed in October 2027. Use the **passkeyProfiles** property.|
38
39
|state|authenticationMethodState|The possible values are: `enabled`, `disabled`.|
39
40
40
41
## Relationships
41
42
|Relationship|Type|Description|
42
43
|:---|:---|:---|
43
-
|includeTargets|[authenticationMethodTarget](../resources/authenticationmethodtarget.md) collection|A collection of groups that are enabled to use the authentication method.|
44
+
|includeTargets|[passkeyAuthenticationMethodTarget](../resources/passkeyauthenticationmethodtarget.md) collection|A collection of groups that are enabled to use the authentication method.|
45
+
|passkeyProfiles|[passkeyProfile](../resources/passkeyprofile.md) collection|A collection of configuration profiles that control the registration of and authentication with passkeys (FIDO2).|
44
46
45
47
## JSON representation
46
48
@@ -57,17 +59,18 @@ The following JSON representation shows the resource type.
0 commit comments