Currently there is no API for identifying whether user is enabled with Azure AD MFA or not, so kindly provide

The User.ExternalUserState property is currently in the beta API. When will this be production ready?

Currently we can get user's supported time zones using /me/outlook/supportedTimezones endpoint. This endpoint can return Windows Time Zones or Iana Time Zones.
The bad thing is that it returns alias and displayName only, no time zone offset or any additional information.
Because of that it's currently impossible to map Windows timezones response with Iana timezones response.
Why do we need that?
Example - display a dropdown with Windows time zones, but initialize selected item based on browser time zone (browser's Intl API gives you Iana name)

Please support syncing more attributes (on user create and update) with MS Graph API.

Here is the wish-list:
proxyAddresses,
postOfficeBox,
pager,
msExchExtensionCustomAttribute,
mail,
ipPhone,
info,
extension<AADAppGUID><attribute_name>,
description,
countryCode,
commonName,
cloudAnchor,
alias

Thanks,
Anna

Currently, the api supports the GET request to download the contact picture for personal contacts, but there is no way to determine if the contact picture exists for a given contact.

For instance, "/me/contacts" returns json for contact should have a field or tag which helps determine if the contact picture exists.

Current results forces to make a separate call for each contact using contact-id without knowing if the picture exists.

It will be very interesting to allow filter by onPremisesSamAccountName in users endpoint.

Filtering currently does not work on businessPhones field. I would like to be able to return users, for example, with a certain area code.

Setting a user's password through the Microsoft Graph API only allows letters from the American alphabet. Many countries have more letters in their alphabets, e.g. the letters Æ, Ø and Å in Denmark and Norway, Ö in Germany and more. These are not allowed when setting a user's password through the Microsoft Graph API.

Passwords with international letters are possible using e.g. DirSync, but not "cloud native", i.e. through the Microsoft Graph API.

Per the documentation at https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/user_update I should be able to update the birthday and hireDate values however my client app (uses app token instead of user token) receives a 500 Internal Server Error when sending a PATCH request

At the moment, a PATCH request on a user object in this form

{

"passwordProfile": 

{ 

    "forceChangePasswordNextSignIn": true,

    "password" : "aNewPa55w0rd"


}

}

...works. The next time the user logs in, they use the new password and are forced to change it. However, I would like to send

{

"passwordProfile": 

{ 

    "forceChangePasswordNextSignIn": true

}

}

which would force a user to change their password, but not have to send them a temporary one. It would be the same as issuing this powershell command:

Set-MsolUserPassword -UserPrincipalName some.user@somedomain.onmicrosoft.com -ForceChangePassword:$true -ForceChangePasswordOnly:$true

In US DoD environments, user certificates are needed to encrypt data for a set of users. This data is available from EWS and is stored in the userCertificate or userSMIMECertificate property in AD.

Please expose these missing attributes via Graph API:
- homePhone
- otherHomePhone
- otherTelephone
- facsimileTelephoneNumber
- postOfficeBox

It would be very useful if you could add the user TimeZone as claim when logging into Azure AD.

https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims

You currently offer a way to disable graph at the tenant level. I am looking for a way to enable/disable on a individual basis. I also need a way to trigger a full reevaluation of the delve type aspects in graph.

Would be good to not only retrieve the state of the authentication requirements, but the details around MFA as well: MFA Methods, etc (StrongAuthenticationMethod, StrongAuthenticationRequirement, StrongAuthenticationDetails that was available in PS for AAD V1)

Hello,
Please allow/integrate to query modified date for directory roles,
This will allow easy to monitor if someone added to role.