Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Represents a FIDO2 authentication methods policy. Authentication methods policies define configuration settings and users or groups who are enabled to use the authentication method.
Inherits from authenticationMethodConfiguration.
Methods
| Method | Return type | Description |
|---|---|---|
| Get | fido2AuthenticationMethodConfiguration | Read the properties and relationships of a fido2AuthenticationMethodConfiguration object. |
| Update | None | Update the properties of a fido2AuthenticationMethodConfiguration object. |
| Delete | None | Reverts the fido2AuthenticationMethodConfiguration object to its default configuration. |
Properties
| Property | Type | Description |
|---|---|---|
| defaultPasskeyProfile | String | The non-deletable baseline passkey profile, within the passkey profile collection. It is automatically created when migrating to passkey profiles and initially mirrors the tenant's legacy global Passkey (FIDO2) authentication methods policy settings. |
| excludeTargets | excludeTarget collection | Groups of users that are excluded from the policy. |
| id | String | The authentication method policy identifier. |
| isAttestationEnforced | Boolean | Determines whether attestation must be enforced for FIDO2 passkey registration. |
| isSelfServiceRegistrationAllowed | Boolean | Determines if users can register new FIDO2 passkeys. |
| keyRestrictions | fido2KeyRestrictions | Controls whether key restrictions are enforced on FIDO2 passkeys, either allowing or disallowing certain key types as defined by Authenticator Attestation GUID (AAGUID), an identifier that indicates the type (for example, make and model) of the authenticator. |
| state | authenticationMethodState | The possible values are: enabled, disabled. |
Relationships
| Relationship | Type | Description |
|---|---|---|
| includeTargets | authenticationMethodTarget collection | A collection of groups that are enabled to use the authentication method. |
| passkeyProfiles | passkeyProfile collection | A collection of configuration profiles that control the registration of and authentication with Passkeys (FIDO2). |
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.fido2AuthenticationMethodConfiguration",
"id": "String (identifier)",
"state": "String",
"defaultPasskeyProfile": "String",
"excludeTargets": [
{
"@odata.type": "microsoft.graph.excludeTarget"
}
],
"isSelfServiceRegistrationAllowed": "Boolean",
"isAttestationEnforced": "Boolean",
"keyRestrictions": {
"@odata.type": "microsoft.graph.fido2KeyRestrictions"
},
"includeTargets": [ { "@odata.type": "microsoft.graph.authenticationMethodTarget" } ]
}