Working with the authentication methods usage report API
Namespace: microsoft.graph
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Authentication methods activity reports provides information on the registration and usage of authentication methods in your tenant.
These reports provide information such as:
- How many users are registered for each authentication method
- How many users are registered for features such as multifactor authentication (MFA), Self-Service Password Reset (SSPR), and passwordless authentication.
- The failure rates of each authentication method
These reports are available on the Microsoft Entra portal through Protection tab group > Authentication methods tab > Activity tab under the Monitoring tab group.
Licenses
A Microsoft Entra ID P1 or P2 license is required to access authentication methods usage and insights reports. Microsoft Entra multifactor authentication and self-service password reset (SSPR) licensing information can be found on the Microsoft Entra pricing site.
Available reports
The following reports are available through Microsoft Graph:
- Users registered and capable of self-service password reset (SSPR) and Azure multifactor authentication (MFA). For more information, see the credentialUserRegistrationCount resource type.
- SSPR usage activity. For more information, see the userCredentialUsageDetails resource type.
- Tenant-level summary of user SSPR activity, including failure and successes. For more information, see the credentialUsageSummary resource type.
- Per-user report of the status of their authentication methods including the default methods, whether registered for MFA, SSPR, and a passwordless authentication method, and so on. For more information, see the userRegistrationDetails resource type.
- Count of users registered, enabled, and capable of using MFA, SSPR, and passwordless authentication. For more information, see the usersRegisteredByFeature resource type.
- Raw count of users registered for email, password, and phone authentication methods. For more information, see the usersRegisteredByMethod resource type.
- (Deprecated. Use the userRegistrationDetails resource type instead) Per-user registration and usage details for different authentication methods, SSPR, and MFA. For more information, see the credentialUserRegistrationDetails resource type.