Azure-docs: When will amr and acr claims be available in v2.0 of Microsoft Identity Platform?

[haneef95]

Hi,

This has been an ongoing question for a while now...

59551, #46953

The latest that I've seen is:

At this time it's not possible. We're investigating more reliable replacements for v2, as the existing amr claim has issues related to onboarding FIDO and other more advanced credentials.
https://github.com/MicrosoftDocs/azure-docs/issues/46953#issuecomment-579924979

We have a need whereby the client needs to verify that the user has authenticated with MFA.

Creating a new issue as advised by @kobulloc-MSFT here.

Could we have a timeline as to when this will be resolved please?

Thanks,

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 2471c08b-befe-8e1a-df08-f13e116c231e
• Version Independent ID: 0d827d33-2906-6352-9398-13863def9354
• Content: Microsoft identity platform access tokens - Microsoft identity platform
• Content Source: articles/active-directory/develop/access-tokens.md
• Service: active-directory
• Sub-service: develop
• GitHub Login: @hpsin
• Microsoft Alias: hirsin

[kobulloc-MSFT]

@haneef95 Thank you for creating a new issue to help with tracking. We are investigating this and will get back to you shortly.

[MarileeTurscak-MSFT]

@haneef95, as of yet nothing has changed since the comment your referenced in January. I did bump this up with some people from that team though and will update you on this thread as soon as there is news on this.

[MarileeTurscak-MSFT]

The product team got back and said that there is still no update on the timeline so far but that there is a backlog work item created for this. I'm tracking this work item and will update when there is more news.

[haneef95]

Okay, thanks for looking into it.

Is there an alternative way to find out if the user has signed in with MFA?

Maybe a different endpoint URI to get information on the user's account?

The latest I've found on this is: https://microsoftgraph.uservoice.com/forums/920506-microsoft-graph-feature-requests/suggestions/36306841-provide-graph-api-to-check-user-has-enabled-azure

Work seems to have Started on it back in 2018, no update since.

Thanks