This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 67%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Hi, When we try to remove the user's mobilePhone or otherMails by passing an empty string, we are getting the below errors.
Message: The mobilePhone should be between 1 and 64 characters.
Message: The otherMails should be between 1 and 256 characters.
I have tried passing null, but it doesn't replace the existing values and I don't want to save " " in the mobilePhone or email as we use these values for MFA.
@AmanpreetSingh-MSFT , Can you please suggest / guide on how can we remove the user's mobilePhone or otherMails using Graph API.
Thank you
Hi @Sakthi • Thank you for reaching out.
This is a problem with Graph SDK as the SDK is discarding the null attribute. This is not specific to mobilePhone attribute. If you set any other attribute like Country or City to null, you will experience the same behavior.
When we set a specific value to the country attribute, the patch request looks like this:
{"country":"US","@odata.type":"microsoft.graph.user"}
If we set the country to null, the patch request will look like this:
{@odata.type":"microsoft.graph.user"}
This is why the previously assigned value doesn't get changed as the patch call doesn't include any information about the attribute you are trying to set as null.
I would suggest you post feedback at msgraph-sdk-dotnet so that the team working on the SDK can help you address the issue.
Setting any attribute to null using Graph Explorer works. The problem occurs only when the null value is being set using Graph SDK.
-----------------------------------------------------------------------------------------------------------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
@AmanpreetSingh-MSFT Thank you! I have raised a bug here https://github.com/microsoftgraph/msgraph-sdk-dotnet/issues/1453 for this.
Also, I have another question,
If the user has lost his mobile and would like to change his MFA from Authenticator app to Authenticator app. Do we have an option to delete the authenticator app from the authentication method of a user using custom policies or Graph API or powershell script.
I read that Graph API provides the delete auth authentication method but it's available only in Beta version, however, we need this for production. Can you please suggest if there is any way?
@Sakthi • You can use the below cmdlets for this purpose:
Install-module msonline
Connect-MsolService
Set-MsolUser -ObjectID object_id_of_the_user -StrongAuthenticationMethods @()
This will clear the MFA methods set for the given user.
-----------------------------------------------------------------------------------------------------------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
@Sakthi • Thanks for reporting the bug. In the meantime, you can try using the "core" SDK instead of the full SDK which is essentially a Graph-optimized REST client upon which the full SDK is built. Presumably, you can issue any valid REST request to MS Graph that way, including those that seem to be impaired by the full SDK: github.com/microsoftgraph/msgraph-sdk-dotnet-core
Thank you so much @AmanpreetSingh-MSFT for your prompt response.
I have couple of follow-up questions on this.
1) Can you please refer me to a document or guide me on how can we connect to B2C tenant using Connect-MsolService?
2) Can we completely automate running this script so that MFA is reset programmatically using C#? Any reference or guide would be of great help.
3) When we run these cmdlets we are prompted to login, can we make this non-interactive by getting token and authorizing to execute the commands?
4) What minimum role is required to run these cmdlets to clear the MFA method.
Kindly share relevant documentation/guide for the above questions. It would be of great help! Thanks
@Sakthi • Please find my comments inline:
1) Can you please refer me to a document or guide me on how can we connect to B2C tenant using Connect-MsolService?
The process is same as standard Azure AD and this is not documented separately for B2C. Make sure that you sign in with local B2C account created via Azure Portal and the UPN must be username@yourB2Ctenant.onmicrosoft.com
2) Can we completely automate running this script so that MFA is reset programmatically using C#? Any reference or guide would be of great help.
As of now this cannot be done directly via Graph API, so it can not be done programatically using C#.
3) When we run these cmdlets we are prompted to login, can we make this non-interactive by getting token and authorizing to execute the commands?
You can store the credentials in a variable and pass the variable along with connect-msolservice cmdlet, as mentioned below. Make sure MFA is disabled in this case.
$cred = Get-Credential
Connect-MsolService -Credential $cred
4) What minimum role is required to run these cmdlets to clear the MFA method.
Authenitcation Administrator.
@Sakthi • Just checking if you have answers to all your questions.
@AmanpreetSingh-MSFT Thank you so much for the response and it answers all my questions.
I just noticed that Delete softwareOathAuthenticationMethod is moved from beta version and is now available in Microsoft.Graph API. So, I'm able to programmatically Reset the MFA too.
Thanks once again for the support.