rencore.com (opens in a new tab) Start a trial (opens in a new tab)
Reference

User registration credential

Last updated Inventory Entra ID

AI summary

User registration credentials in Rencore contain Entra ID authentication data for each user, including enabled MFA methods, self-service password reset configuration, admin status, and risk scores. The object provides 29 properties you can use in automations to identify users by authentication status, create compliance segments, or build governance rules based on MFA capability and password reset configuration.

All Entra ID registration credentials of a user (MFA, Admin, Auth methods)

Part of the Entra ID inventory.

In Rencore Governance

The User Registration Credential inventory page in Rencore Governance: counts, trend, violated policies and the list of objects
The inventory page in a Rencore demo Environment, captured October 2026.

Scan settings

Default scanning interval Allowed scanning intervals Data removal during incremental scan
Monthly Daily, Weekly, Bi-Weekly, Monthly, Never, Initial Yes

Properties

29 properties in 7 groups. Open a group to see its properties.

Name and identity 3
Property Type Description Automation placeholder
Display Name String {{UserRegistrationCredential.DisplayName}}
User Display Name String Provides the user name of the corresponding user. {{UserRegistrationCredential.UserName}}
User PrincipalName String Provides the user principal name of the corresponding user. {{UserRegistrationCredential.UserPrincipalName}}

Organization and location 3
Property Type Description Automation placeholder
Auth Method Alternate Mobile Phone Boolean Mobile phone authentication has been set for the user for multi factor authentication. {{UserRegistrationCredential.AuthMethodAlternateMobilePhone}}
Auth Method Mobile Phone Boolean Text messages to mobile phone have been set for the user for multi factor authentication. {{UserRegistrationCredential.AuthMethodMobilePhone}}
Auth Method Office Phone Boolean Text messages to office phone have been set for the user for multi factor authentication. {{UserRegistrationCredential.AuthMethodOfficePhone}}

Activity and usage 1
Property Type Description Automation placeholder
Last scan update DateTime Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. {{UserRegistrationCredential.LastModifiedTime}}

Dates and scanning 1
Property Type Description Automation placeholder
Initially Scanned DateTime Shows when this object was initially found in a scan. {{UserRegistrationCredential.CreatedTime}}

Security and compliance 18
Property Type Description Automation placeholder
Auth Method App Code Boolean App code authentication using authenticator app has been set for the user for multi factor authentication. {{UserRegistrationCredential.AuthMethodAppCode}}
Auth Method App Notification Boolean App code authentication using authenticator app has been set for the user for multi factor authentication. {{UserRegistrationCredential.AuthMethodAppNotification}}
Auth Method App Password Boolean App passwords have been enabled for user for authentication in client applications. {{UserRegistrationCredential.AuthMethodAppPassword}}
Auth Method Email Boolean Reset using email have been set for password reset of the user. {{UserRegistrationCredential.AuthMethodEmail}}
Auth Method Fido Boolean Fido token authentication has been set for the user for Multi Factor authentication. {{UserRegistrationCredential.AuthMethodFido}}
Auth Method Microsoft Authenticator Push Boolean Microsoft Authenticator Push have been enabled for user for authentication in client applications. {{UserRegistrationCredential.AuthMethodMicrosoftAuthenticatorPush}}
Auth Method None Boolean None auth method have been enabled for user for authentication in client applications. {{UserRegistrationCredential.AuthMethodNone}}
Auth Method Security Question Boolean Security questions have been set for password reset of the user. {{UserRegistrationCredential.AuthMethodSecurityQuestion}}
Auth Method Software One Time Passcode Boolean Software One Time Passcode have been enabled for user for authentication in client applications. {{UserRegistrationCredential.AuthMethodSoftwareOneTimePasscode}}
Id String The unique identifier for the activity {{UserRegistrationCredential.CredentialId}}
Default MFA Method String The method the user or admin selected as default for performing multi-factor authentication for the user. Allowed values: alternateMobilePhone, microsoftAuthenticatorPush, mobilePhone, none, officePhone, softwareOneTimePasscode. {{UserRegistrationCredential.DefaultMfaMthod}}
Is Admin Boolean Whether the user has an admin role in the tenant. This value can be used to check the authentication methods that privileged accounts are registered for and capable of. {{UserRegistrationCredential.IsAdmin}}
Is Sspr Enabled Boolean Indicates whether the user enabled to perform self-service password reset. {{UserRegistrationCredential.IsEnabled}}
Is MFA Capable Boolean Indicates whether the user has registered a strong authentication method for MFA. {{UserRegistrationCredential.IsMfaCapable}}
Is MFA Registered Boolean Indicates whether the user is registered for MFA. {{UserRegistrationCredential.IsMfaRegistered}}
Risk Score Int32 Stores risk score {{UserRegistrationCredential.RiskScore}}
Risk Score Update DateTime Stores risk score update {{UserRegistrationCredential.RiskScoreLastUpdate}}
Risk Score Value String Stores risk score value like Low_Low {{UserRegistrationCredential.RiskScoreValue}}

Settings 2
Property Type Description Automation placeholder
Is Sspr Capable Boolean Indicates whether the user is ready to perform self-service password reset. {{UserRegistrationCredential.IsCapable}}
Is Sspr Registered Boolean Indicates whether the user has registered the required number of authentication methods for self-service password reset {{UserRegistrationCredential.IsRegistered}}

Other properties 1
Property Type Description Automation placeholder
User User Registration Credentials of the user {{UserRegistrationCredential.User}}

Relations

Relation Connector Description
User Microsoft 365 All users registered in your tenant (internal, external)

Segments

Segment Description
MFA registered users Shows all users with enabled multi factor authentication

Actions

This object does currently not have any actions.

Frequently asked questions

What is the user registration credential object in Rencore Governance?

All Entra ID registration credentials of a user (MFA, Admin, Auth methods). User registration credential is an object type in the Entra ID inventory of Rencore Governance.

Which properties does Rencore Governance collect for user registration credential?

Rencore Governance collects 29 properties for User registration credential, such as Auth Method Alternate Mobile Phone, Auth Method App Code, Auth Method App Notification and 26 more.

How often is user registration credential scanned?

By default monthly. You can change the scan interval of User registration credential objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the Entra ID connector?

The Entra ID connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.

Related pages

Related pages