fido2AuthenticationMethodConfiguration resource type

Namespace: microsoft.graph

Represents a FIDO2 authentication methods policy. Authentication methods policies define configuration settings and users or groups who are enabled to use the authentication method.

Methods

Method Return type Description
Get fido2AuthenticationMethodConfiguration Read the properties and relationships of a fido2AuthenticationMethodConfiguration object.
Update fido2AuthenticationMethodConfiguration Update the properties of a fido2AuthenticationMethodConfiguration object.
Delete None Reverts the fido2AuthenticationMethodConfiguration object to its default configuration.

Properties

Property Type Description
id String The authentication method policy identifier.
isAttestationEnforced Boolean Determines whether attestation must be enforced for FIDO2 security key registration.
isSelfServiceRegistrationAllowed Boolean Determines if users can register new FIDO2 security keys.
keyRestrictions fido2KeyRestrictions Controls whether key restrictions are enforced on FIDO2 security keys, either allowing or disallowing certain key types as defined by Authenticator Attestation GUID (AAGUID), an identifier that indicates the type (e.g. make and model) of the authenticator.
state authenticationMethodState Possible values are: enabled, disabled.

Relationships

Relationship Type Description
includeTargets authenticationMethodTarget collection A collection of users or groups who are enabled to use the authentication method.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.fido2AuthenticationMethodConfiguration",
  "id": "String (identifier)",
  "state": "String",
  "isSelfServiceRegistrationAllowed": "Boolean",
  "isAttestationEnforced": "Boolean",
  "keyRestrictions": {
    "@odata.type": "microsoft.graph.fido2KeyRestrictions"
  },
  "includeTargets": [ { "@odata.type": "microsoft.graph.authenticationMethodTarget" } ]
}