authenticationContextClassReference resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a Microsoft Entra authentication context class reference. Authentication context class references are custom values that define a Conditional Access authentication requirement.

Methods

Method Return Type Description
List authenticationContextClassReference collection Get all of the authenticationContextClassReference objects in the organization.
Create authenticationContextClassReference Create a new authenticationContextClassReference object.
Get authenticationContextClassReference Read properties and relationships of a authenticationContextClassReference object.
Update None Update a authenticationContextClassReference object.
Delete None Delete an authenticationContextClassReference object.

Properties

Property Type Description
id String Identifier used to reference the authentication context class. The ID is used to trigger step-up authentication for the referenced authentication requirements and is the value that will be issued in the acrs claim of an access token. This value in the claim is used to verify that the required authentication context has been satisfied. The allowed values are c1 through c25.
Supports $filter (eq).
displayName String A friendly name that identifies the authenticationContextClassReference object when building user-facing admin experiences. For example, a selection UX.
description String A short explanation of the policies that are enforced by authenticationContextClassReference. This value should be used to provide secondary text to describe the authentication context class reference when building user facing admin experiences. For example, selection UX.
isAvailable Boolean Indicates whether the authenticationContextClassReference has been published by the security admin and is ready for use by apps. When it's set to false, it shouldn't be shown in selection UX used to tag resources with authentication context class values. It will still be shown in the Conditional Access policy authoring experience.
Supports $filter (eq).

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

    {
      "id": "String",
      "displayName": "String",
      "description": "String",
      "isAvailable": "Boolean",
    }