microsoftgraph / microsoftgraph/msgraph-sdk-go

Add API support for `Authentication methods > Password protection` details

Open
#933 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

status:waiting-for-triage type:feature
Dominant language
Go
Stars
335
Forks
43
Avg merge
15h 19m
Merged PRs (30d)
3

Description

Is your feature request related to a problem? Please describe the problem.

Dear Team,

I am currently exploring ways to retrieve Authentication methods configurations using the Microsoft Graph SDK (both GA and Beta).

While APIs exist for authenticationMethodsPolicy (e.g., per-method enable/disable state), I have not been able to identify API endpoints that expose the following two key areas available in the Microsoft Entra admin center (see screenshots):

1. Password protection

  • The following settings are not available via Graph:
  • Custom smart lockout
  • Lockout threshold
  • Lockout duration in seconds
  • Custom banned passwords
  • Enforce custom list (Yes/No)
  • Custom banned password list
  • Password protection for Windows Server Active Directory
  • Enable password protection on Windows Server AD (Yes/No)
  • Mode (Enforced/Audit)

2. Authentication methods → Settings

The following tenant-wide settings are also missing from Graph:

  • Report suspicious activity
    • State (Microsoft-managed / Enabled / Disabled)
    • Target (All users / Specific groups)
    • Reporting code
  • System-preferred multifactor authentication
    • State (Enabled / Disabled / Microsoft-managed)
    • Target (All users / Specific groups)

Currently, I could not find any API in either v1.0 or beta that surfaces these settings.

Image Image

Thanks

Describe the solution you'd like.

I would like to add support in the SDK to retrieve above Settings .

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by verifying whether Microsoft Graph v1.0 or beta exposes the listed password-protection and authentication-method settings, then inspect how the Go SDK represents comparable APIs. Done means the available settings can be retrieved through the SDK, with coverage for the supported endpoints and a clear outcome for settings that Graph does not expose.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
api, authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.