Microsoft Entra Hardware OATH Provisioning

Microsoft Graph beta: PATCH /beta/directory/authenticationMethodDevices/hardwareOathDevices


Microsoft Entra hardware OATH token generator

Create bulk JSON, cURL, PowerShell, or legacy Microsoft CSV records for hardware OATH token provisioning. The current Hardware OATH workflow uses the Microsoft Graph /beta endpoint and supports 30/60-second tokens with HMAC-SHA1 or HMAC-SHA256.

Graph output can create tokens without users, assign one template Object ID to every token, or read an individual Object ID from the third field of each input line. Legacy CSV can similarly use a template UPN or an individual UPN per line.

The page performs conversion locally and does not send token secrets to Microsoft or this website. Beta APIs can change; verify permissions and the request contract in the Microsoft Graph documentation before production provisioning.