Remove-MsIdUserAuthenticationMethod
SYNOPSIS
Deletes all the authentication methods registered against a user.
It is recommended to use Temporary Access Pass (TAP) to allow a users to sign in temporarily without MFA instead of deleting all methods.
SYNTAX
Remove-MsIdUserAuthenticationMethod [[-UserId] <String>] [-ProgressAction <ActionPreference>]
[<CommonParameters>]
DESCRIPTION
This cmdlet aims to replicate the Require re-register MFA option in the admin portal.
Deleting all methods will force the user to re-register MFA next time they sign in.
EXAMPLES
EXAMPLE 1
Connect-MgGraph -Scopes UserAuthenticationMethod.ReadWrite.All
Remove-MsIdUserAuthenticationMethod -UserId john@contoso.com
This example deletes all the authentication methods for the user
PARAMETERS
-UserId
The user UPN or ID to delete the authentication methods for.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-ProgressAction
{{ Fill ProgressAction Description }}
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.