User Registration Credential

All Entra ID registration credentials of a user (MFA, Admin, Auth methods)

Part of the Entra ID inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Monthly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Auth Method Alternate Mobile Phone	Boolean	Mobile phone authentication has been set for the user for multi factor authentication.	{{UserRegistrationCredential.AuthMethodAlternateMobilePhone}}
Auth Method App Code	Boolean	App code authentication using authenticator app has been set for the user for multi factor authentication.	{{UserRegistrationCredential.AuthMethodAppCode}}
Auth Method App Notification	Boolean	App code authentication using authenticator app has been set for the user for multi factor authentication.	{{UserRegistrationCredential.AuthMethodAppNotification}}
Auth Method App Password	Boolean	App passwords have been enabled for user for authentication in client applications.	{{UserRegistrationCredential.AuthMethodAppPassword}}
Auth Method Email	Boolean	Reset using email have been set for password reset of the user.	{{UserRegistrationCredential.AuthMethodEmail}}
Auth Method Fido	Boolean	Fido token authentication has been set for the user for Multi Factor authentication.	{{UserRegistrationCredential.AuthMethodFido}}
Auth Method Microsoft Authenticator Push	Boolean	Microsoft Authenticator Push have been enabled for user for authentication in client applications.	{{UserRegistrationCredential.AuthMethodMicrosoftAuthenticatorPush}}
Auth Method Mobile Phone	Boolean	Text messages to mobile phone have been set for the user for multi factor authentication.	{{UserRegistrationCredential.AuthMethodMobilePhone}}
Auth Method None	Boolean	None auth method have been enabled for user for authentication in client applications.	{{UserRegistrationCredential.AuthMethodNone}}
Auth Method Office Phone	Boolean	Text messages to office phone have been set for the user for multi factor authentication.	{{UserRegistrationCredential.AuthMethodOfficePhone}}
Auth Method Security Question	Boolean	Security questions have been set for password reset of the user.	{{UserRegistrationCredential.AuthMethodSecurityQuestion}}
Auth Method Software One Time Passcode	Boolean	Software One Time Passcode have been enabled for user for authentication in client applications.	{{UserRegistrationCredential.AuthMethodSoftwareOneTimePasscode}}
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	{{UserRegistrationCredential.CreatedTime}}
Id	String	The unique identifier for the activity	{{UserRegistrationCredential.CredentialId}}
Default MFA Method	String	The method the user or admin selected as default for performing multi-factor authentication for the user. Allowed values: alternateMobilePhone, microsoftAuthenticatorPush, mobilePhone, none, officePhone, softwareOneTimePasscode.	{{UserRegistrationCredential.DefaultMfaMthod}}
Display Name	String		{{UserRegistrationCredential.DisplayName}}
Is Admin	Boolean	Whether the user has an admin role in the tenant. This value can be used to check the authentication methods that privileged accounts are registered for and capable of.	{{UserRegistrationCredential.IsAdmin}}
Is Sspr Capable	Boolean	Indicates whether the user is ready to perform self-service password reset.	{{UserRegistrationCredential.IsCapable}}
Is Sspr Enabled	Boolean	Indicates whether the user enabled to perform self-service password reset.	{{UserRegistrationCredential.IsEnabled}}
Is MFA Capable	Boolean	Indicates whether the user has registered a strong authentication method for MFA.	{{UserRegistrationCredential.IsMfaCapable}}
Is MFA Registered	Boolean	Indicates whether the user is registered for MFA.	{{UserRegistrationCredential.IsMfaRegistered}}
Is Sspr Registered	Boolean	Indicates whether the user has registered the required number of authentication methods for self-service password reset	{{UserRegistrationCredential.IsRegistered}}
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	{{UserRegistrationCredential.LastModifiedTime}}
Risk Score	Int32	Stores risk score	{{UserRegistrationCredential.RiskScore}}
Risk Score Update	DateTime	Stores risk score update	{{UserRegistrationCredential.RiskScoreLastUpdate}}
Risk Score Value	String	Stores risk score value like Low_Low	{{UserRegistrationCredential.RiskScoreValue}}
User	User	Registration Credentials of the user	{{UserRegistrationCredential.User}}
User Display Name	String	Provides the user name of the corresponding user.	{{UserRegistrationCredential.UserName}}
User PrincipalName	String	Provides the user principal name of the corresponding user.	{{UserRegistrationCredential.UserPrincipalName}}

Relations

Relation	Service	Description
User	Microsoft 365	All users registered in your tenant (internal, external)

Segments

Segment	Description
MFA Registered Users	Shows all users with enabled multi factor authentication

Actions

This object does currently not have any actions.