authenticationContextClassReference resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a Microsoft Entra authentication context class reference. Authentication context class references are custom values that define a Conditional Access authentication requirement.

Methods

Method	Return Type	Description
List	authenticationContextClassReference collection	Get all of the authenticationContextClassReference objects in the organization.
Create	authenticationContextClassReference	Create a new authenticationContextClassReference object.
Get	authenticationContextClassReference	Read properties and relationships of a authenticationContextClassReference object.
Update	None	Update a authenticationContextClassReference object.
Delete	None	Delete an authenticationContextClassReference object.

Properties

Property	Type	Description
id	String	Identifier used to reference the authentication context class. The ID is used to trigger step-up authentication for the referenced authentication requirements and is the value that will be issued in the acrs claim of an access token. This value in the claim is used to verify that the required authentication context has been satisfied. The allowed values are c1 through c25. Supports $filter (eq).
displayName	String	A friendly name that identifies the authenticationContextClassReference object when building user-facing admin experiences. For example, a selection UX.
description	String	A short explanation of the policies that are enforced by authenticationContextClassReference. This value should be used to provide secondary text to describe the authentication context class reference when building user facing admin experiences. For example, selection UX.
isAvailable	boolean	Indicates whether the authenticationContextClassReference has been published by the security admin and is ready for use by apps. When it's set to false, it shouldn't be shown in selection UX used to tag resources with authentication context class values. It will still be shown in the Conditional Access policy authoring experience. Supports $filter (eq).

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

    {
      "id": "String",
      "displayName": "String",
      "description": "String",
      "isAvailable": "Boolean",
    }