title | description | author | ms.reviewer | ms.localizationpriority | ms.subservice | doc_type |
---|---|---|---|---|---|---|
authenticationStrengthPolicy: usage |
Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. |
InbarckMS |
conditionalaccesspm |
medium |
entra-sign-in |
apiPageType |
Namespace: microsoft.graph
Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.
[!INCLUDE national-cloud-support]
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-authenticationstrength-apis-read]
GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicyId}/usage
Name | Description |
---|---|
Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Don't supply a request body for this method.
If successful, this function returns a 200 OK
response code and an authenticationStrengthUsage complex type in the response body.
The following example shows a request.
GET https://graph.microsoft.com/v1.0/policies/authenticationStrengthPolicies/{authenticationStrengthPolicyId}/usage
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
The following example shows the response.
Note: The response object shown here might be shortened for readability.
HTTP/1.1 200 OK
Content-Type: application/json
{
"mfa": [
{
"displayName": "Conditional Access Policy 1",
"id": "a26dbede-a6c0-4156-92e1-6c86dd7bc561",
"grantControls": {
"authenticationStrength": {
"id": "00000000-0000-0000-0000-000000000003"
},
"controls": [
"MfaAndChangePassword"
]
}
}
],
"none": [
{
"displayName": "Conditional Access Policy 2",
"id": "5d7d5a7f-dd35-412b-a18d-5411d8eafe8f",
"grantControls": {
"authenticationStrength": {
"id": "00000000-0000-0000-0000-000000000003"
},
"controls": [
"RequireCompliantDevice"
]
}
}
]
}