The requirement is to create user and add mobile phone with SMS signin flag to true. Even better, this new experience is built entirely on Microsoft Graph APIs so you can script all your authentication method management scenarios. MFA can be the main component of a strong identity and access management policy . . @Dav1988- I have got same error. For example, the NetUserChangePassword function MSDN topic states the following:domainname [in]. It keeps telling me Authentication failed. Try all the authentication modes in the ShareGate migration tool. This event occurs when a user deletes an individual method. Using the authentication method APIs, you can now: Weve also added new APIs to manage your authentication method policies for FIDO2 and Passwordless Microsoft Authenticator. As part of our ongoing usability and security enhancements, weve also taken this opportunity to simplify how we handle phone numbers in Azure AD. Thank you for your question. Are you using an admin account? Make sure that service principal names (SPNs) are registered correctly. Please provide a longer password. But the update will be successful.