Get-MgUserAuthenticationMethod
Use Get-MgUserAuthenticationMethod to list a user's registered authentication methods.
Documentation: Microsoft Learn — Get-MgUserAuthenticationMethod
Common usage
Get-MgUserAuthenticationMethod -UserId '11111111-2222-3333-4444-555555555555' -ErrorAction StopThis is a usage example, not the complete parameter-set reference. Follow Microsoft Learn below for supported parameters and version details.
See the command anatomy
Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.
Get-MgUserAuthenticationMethod -UserId '11111111-2222-3333-4444-555555555555' -ErrorAction Stop- Stage 1Get-MgUserAuthenticationMethod
-UserId -ErrorAction
Try it
PowerShell example · browser support is limited.
Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.
Follow the objects
Run the command to inspect each stage.
Examples
Get-MgUserAuthenticationMethod -UserId '11111111-2222-3333-4444-555555555555'
Get-MgUserAuthenticationMethod -UserId '11111111-2222-3333-4444-555555555555' -ErrorAction StopShow reference output
Sample output · fictional data, shaped like the real thing
Id MethodType -- ---------- 11111111-2222-3333-4444-555555555555 microsoftAuthenticatorAuthenticationMethod
Practical use and troubleshooting
Practical scenario: Use Get-MgUserAuthenticationMethod when you need to list a user's registered authentication methods. Review syntax and sample output, then try an example in the browser lab. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.
Common error and fix: Insufficient privileges requires the correct authentication-method read permission and, for delegated access to other users, an appropriate role. Check UserId and consent before retrying; do not expose method details unnecessarily. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.
See also: Get-MgUser. Get-MgUserAuthenticationMethod lists registered methods for one user; Get-MgUser reads the account object. Registered methods do not by themselves prove that a particular sign-in satisfied an MFA policy. Read the linked command before substituting it; similar names do not imply identical inputs or output.
Recap
Get-MgUserAuthenticationMethod Use Get-MgUserAuthenticationMethod to list a user's registered authentication methods.
Next: Get-LocalUser