authenticationContextClassReference resource type

Namespace: microsoft.graph


APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a Microsoft Entra authentication context class reference. Authentication context class references are custom values that define a Conditional Access authentication requirement.


Method Return Type Description
List authenticationContextClassReference authenticationContextClassReference collection Get all of the authenticationContextClassReference objects in the organization.
Create authenticationContextClassReference authenticationContextClassReference Create a new authenticationContextClassReference object.
Get authenticationContextClassReference authenticationContextClassReference Read properties and relationships of a authenticationContextClassReference object.
Update authenticationContextClassReference None Update a authenticationContextClassReference object.
Delete authenticationContextClassReference None Delete an authenticationContextClassReference object.


Property Type Description
id String Identifier used to reference the authentication context class. The ID is used to trigger step-up authentication for the referenced authentication requirements and is the value that will be issued in the acrs claim of an access token. This value in the claim is used to verify that the required authentication context has been satisfied. The allowed values are c1 through c25.
Supports $filter (eq).
displayName String A friendly name that identifies the authenticationContextClassReference object when building user-facing admin experiences. For example, a selection UX.
description String A short explanation of the policies that are enforced by authenticationContextClassReference. This value should be used to provide secondary text to describe the authentication context class reference when building user facing admin experiences. For example, selection UX.
isAvailable boolean Indicates whether the authenticationContextClassReference has been published by the security admin and is ready for use by apps. When it's set to false, it shouldn't be shown in selection UX used to tag resources with authentication context class values. It will still be shown in the Conditional Access policy authoring experience.
Supports $filter (eq).



JSON representation

Here's a JSON representation of the resource.

      "id": "String",
      "displayName": "String",
      "description": "String",
      "isAvailable": "Boolean",