Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Identity.authentication Events Flow API

The identity.authenticationEventsFlow API from Microsoft Entra ID (formerly Azure AD) — 26 operation(s) for identity.authenticationeventsflow.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 39

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /identity/authenticationEventsFlows List authentication events flows (user flows) · List authenticationEventsFlows #
Ask an LLM
“How do I see all the sign-up user flows configured in my Entra External ID tenant?”
“Which authentication events policies exist in my tenant right now?”
Tell an agent
List every authentication events flow in the tenant.
Show authentication events flows matching {filter}.
POST /identity/authenticationEventsFlows Create an authentication events flow · Create authenticationEventsFlow #
Ask an LLM
“How do I create a new self-service sign-up user flow for external users?”
“What do I have to send to set up a new authentication events policy?”
Tell an agent
Create a new authentication events flow called {displayName}.
Set up a sign-up user flow named {displayName} described as {description}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id} Get one authentication events flow · Get authenticationEventsFlow #
Ask an LLM
“How can I look up the full settings of one specific user flow by its ID?”
“What subtype is a given authentication events flow, and what does it contain?”
Tell an agent
Get authentication events flow {flow}.
Show me the configuration of user flow {flow}.
PATCH /identity/authenticationEventsFlows/{authenticationEventsFlow-id} Update an authentication events flow · Update authenticationEventsFlow #
Ask an LLM
“How do I rename an existing user flow or change its description?”
“Can I change the conditions on a user flow after it's created?”
Tell an agent
Rename authentication events flow {flow} to {displayName}.
Change the description of user flow {flow} to {description}.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id} Delete an authentication events flow · Delete authenticationEventsFlow #
Ask an LLM
“What happens to linked applications when I delete a user flow?”
“Can I remove a sign-up user flow I no longer need?”
Tell an agent destructive · confirm first
Delete authentication events flow {flow}.
Remove user flow {flow} and unlink all its applications.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions Get the conditions that trigger a user flow · Get conditions property value #
Ask an LLM
“What conditions decide whether a particular user flow gets invoked?”
“Which authentication request context causes an events policy to run?”
Tell an agent
Show the invocation conditions for authentication events flow {flow}.
Tell me when user flow {flow} gets triggered.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications List applications linked to a user flow · List includeApplications (for a user flow) #
Ask an LLM
“Which apps are currently linked to my self-service sign-up user flow?”
“How can I see what applications use a given authentication events flow?”
Tell an agent
List the applications linked to user flow {flow}.
Which apps use sign-up flow {flow}? List them.
POST /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications Link an application to a user flow · Add includeApplication (to a user flow) #
Ask an LLM
“How do I enable a sign-up user flow for one of my applications?”
“Can I attach an app to an existing authentication events flow by its app ID?”
Tell an agent
Link application {appId} to user flow {flow}.
Enable the sign-up experience of flow {flow} for app {appId}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications/{authenticationConditionApplication-appId} Get one application linked to a user flow · Get includeApplications from identity #
Ask an LLM
“Is a specific app included in the conditions of a given user flow?”
“How do I read a single linked application entry on an authentication events flow?”
Tell an agent
Get linked application {appId} on user flow {flow}.
Check whether app {appId} is included in flow {flow}.
PATCH /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications/{authenticationConditionApplication-appId} Update an application link on a user flow · Update the navigation property includeApplications in identity #
Ask an LLM
“Can I edit the linked-application entry on a user flow's conditions?”
“How do I change which app ID an included application entry points to?”
Tell an agent
Update linked application {appId} on user flow {flow}.
Edit the included-application entry {appId} in the conditions of flow {flow}.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications/{authenticationConditionApplication-appId} Unlink an application from a user flow · Delete authenticationConditionApplication (from a user flow) #
Ask an LLM
“How do I stop an app from using a customized sign-up user flow?”
“Can I remove one application from an authentication events flow without deleting the flow?”
Tell an agent destructive · confirm first
Unlink application {appId} from user flow {flow}.
Stop app {appId} from using the custom sign-up experience of flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications/$count Count applications linked to a user flow · Get the number of the resource #
Ask an LLM
“How many applications are linked to a particular user flow?”
“What's the number of included apps on an authentication events flow?”
Tell an agent
Count the applications linked to user flow {flow}.
Tell me how many apps are included in flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow Get a flow cast as a self-service sign-up flow · Get the item of type microsoft.graph.authenticationEventsFlow as… #
Ask an LLM
“How do I read a flow specifically as an external users self-service sign-up flow type?”
“Can I fetch one authentication events flow typed as externalUsersSelfServiceSignUpEventsFlow?”
Tell an agent
Get flow {flow} cast as an external users self-service sign-up flow.
Read flow {flow} as the externalUsersSelfServiceSignUpEventsFlow type.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions Get conditions of a self-service sign-up flow · Get conditions property value #
Ask an LLM
“What invocation conditions are set on a self-service sign-up flow, read through its typed path?”
“Which conditions are stored on the externalUsersSelfServiceSignUpEventsFlow cast of a flow?”
Tell an agent
Show the conditions of flow {flow} through the self-service sign-up cast.
Read the externalUsersSelfServiceSignUpEventsFlow conditions of flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications List apps on a self-service sign-up flow (typed) · Get includeApplications from identity #
Ask an LLM
“Which applications are linked to a flow when I read it as a self-service sign-up flow?”
“How do I list included apps via the externalUsersSelfServiceSignUpEventsFlow path?”
Tell an agent
List apps linked to self-service sign-up flow {flow} using the typed cast.
Read the included apps of flow {flow} as an externalUsersSelfServiceSignUpEventsFlow.
POST /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications Link an app via the self-service sign-up cast · Create new navigation property to includeApplications for identity #
Ask an LLM
“Can I add an included application through the self-service sign-up flow's typed path?”
“How do I attach an app to an externalUsersSelfServiceSignUpEventsFlow directly?”
Tell an agent
Add app {appId} to self-service sign-up flow {flow} through the typed cast.
Via the externalUsersSelfServiceSignUpEventsFlow path, include app {appId} in flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications/{authenticationConditionApplication-appId} Get a linked app on a self-service sign-up flow · Get includeApplications from identity #
Ask an LLM
“How do I read one included app entry on the self-service sign-up cast of a flow?”
“Is a given app ID in the typed self-service sign-up flow's application conditions?”
Tell an agent
Get app {appId} from self-service sign-up flow {flow} via the typed cast.
Via the externalUsersSelfServiceSignUpEventsFlow path, read included app {appId} of flow {flow}.
PATCH /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications/{authenticationConditionApplication-appId} Update an app link via the self-service sign-up cast · Update the navigation property includeApplications in identity #
Ask an LLM
“How do I edit an included app entry on the typed self-service sign-up flow?”
“Can I patch a linked application through the externalUsersSelfServiceSignUpEventsFlow path?”
Tell an agent
Update included app {appId} on self-service sign-up flow {flow} via the typed cast.
Via the externalUsersSelfServiceSignUpEventsFlow path, patch included app {appId} of flow {flow}.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications/{authenticationConditionApplication-appId} Unlink an app via the self-service sign-up cast · Delete navigation property includeApplications for identity #
Ask an LLM
“Can I remove an included app through the externalUsersSelfServiceSignUpEventsFlow path?”
“How do I drop one app from a self-service sign-up flow using its typed endpoint?”
Tell an agent destructive · confirm first
Remove app {appId} from self-service sign-up flow {flow} through the typed cast.
Via the externalUsersSelfServiceSignUpEventsFlow path, unlink app {appId} from flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications/$count Count apps on a self-service sign-up flow (typed) · Get the number of the resource #
Ask an LLM
“How many apps are linked when I count through the self-service sign-up cast?”
“What's the included-application count on an externalUsersSelfServiceSignUpEventsFlow?”
Tell an agent
Give me the included-app total for self-service sign-up flow {flow}, read through the typed cast.
Via the externalUsersSelfServiceSignUpEventsFlow path, count included apps on flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection Get a sign-up flow's attribute collection handler · Get onAttributeCollection property value #
Ask an LLM
“What runs when a sign-up flow is ready to collect attributes from the user?”
“How do I see the onAttributeCollection configuration of a self-service sign-up flow?”
Tell an agent
Show the attribute collection handler for sign-up flow {flow}.
What does sign-up flow {flow} invoke when collecting user attributes? Show it.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp Get the attribute collection handler as sign-up type · Get the item of type microsoft.graph.onAttributeCollectionHandler as… #
Ask an LLM
“Can I read a flow's attribute collection handler cast to the external users self-service sign-up handler type?”
“How do I get onAttributeCollectionExternalUsersSelfServiceSignUp for a user flow?”
Tell an agent
Get the attribute collection handler of flow {flow} cast to the self-service sign-up handler type.
Read onAttributeCollectionExternalUsersSelfServiceSignUp for flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes List the attributes a sign-up flow collects · List attributes (of a user flow) #
Ask an LLM
“Which user attributes does my sign-up user flow ask people for?”
“How do I see the full attribute objects collected during self-service sign-up?”
Tell an agent
List the attributes collected by sign-up flow {flow}.
Show which fields sign-up flow {flow} asks new users to fill in.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/{identityUserFlowAttribute-id}/$ref Remove an attribute from a sign-up flow by ID · Delete ref of navigation property attributes for identity #
Ask an LLM
“How do I stop collecting a specific attribute in my sign-up flow when I know its attribute ID?”
“Can I unlink one user flow attribute from a sign-up flow using the attribute's ID in the path?”
Tell an agent destructive · confirm first
Remove attribute {attribute} from sign-up flow {flow}.
Stop sign-up flow {flow} from collecting attribute {attribute}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/$count Count the attributes a sign-up flow collects · Get the number of the resource #
Ask an LLM
“How many attributes does a given sign-up user flow collect?”
“What's the number of collected attributes configured on a self-service sign-up flow?”
Tell an agent
Count the attributes collected by sign-up flow {flow}.
Tell me how many fields sign-up flow {flow} collects.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/$ref List attribute references on a sign-up flow · List attributes (of a user flow) #
Ask an LLM
“Can I get just the reference links of the attributes a sign-up flow collects?”
“How do I list attribute $ref entries rather than full attribute objects for a user flow?”
Tell an agent
List the attribute references on sign-up flow {flow}.
Return only the attribute $ref links for sign-up flow {flow}.
POST /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/$ref Add an attribute to a sign-up flow · Add attribute (to user flow) #
Ask an LLM
“How do I start collecting a new attribute like city or job title during sign-up?”
“Can I add a custom user flow attribute to an existing self-service sign-up flow?”
Tell an agent
Add attribute {attributeRef} to sign-up flow {flow}.
Start collecting attribute {attributeRef} when users sign up through flow {flow}.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/$ref Remove an attribute from a sign-up flow by reference · Delete ref of navigation property attributes for identity #
Ask an LLM
“How do I remove a collected attribute using its @id reference URL instead of its ID?”
“Can I unlink an attribute from a sign-up flow by passing the attribute reference as a query value?”
Tell an agent destructive · confirm first
Remove the attribute referenced by {ref} from sign-up flow {flow}.
Unlink the attribute whose @id is {ref} from flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart Get a sign-up flow's authentication method load handler · Get onAuthenticationMethodLoadStart property value #
Ask an LLM
“What happens when a sign-up flow is ready to present authentication methods to the user?”
“How do I read the onAuthenticationMethodLoadStart configuration of a user flow?”
Tell an agent
Show the authentication method load handler for sign-up flow {flow}.
What does sign-up flow {flow} invoke before showing sign-in methods? Show it.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp Get the method load handler as sign-up type · Get the item of type microsoft.graph.onAuthenticationMethodLoadStartHandler as… #
Ask an LLM
“Can I read a flow's authentication method load handler cast to its self-service sign-up handler type?”
“How do I get onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp for a flow?”
Tell an agent
Get the method load handler of flow {flow} cast to the self-service sign-up handler type.
Read onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp for flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders List identity providers in a sign-up flow · List identityProviders (in a user flow) #
Ask an LLM
“Which identity providers, like email or social accounts, can people sign up with in my user flow?”
“How do I see the full identity provider objects defined for a self-service sign-up flow?”
Tell an agent
List the identity providers offered in sign-up flow {flow}.
Show which sign-in options people get in sign-up flow {flow}.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/{identityProviderBase-id}/$ref Remove an identity provider from a sign-up flow by ID · Delete ref of navigation property identityProviders for identity #
Ask an LLM
“How do I take a sign-in option out of my user flow when I know the provider's ID?”
“Can I unlink an identity provider from a sign-up flow using its ID in the path?”
Tell an agent destructive · confirm first
Remove identity provider {provider} from sign-up flow {flow}.
Take sign-in option {provider} out of sign-up flow {flow}.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/$count Count identity providers in a sign-up flow · Get the number of the resource #
Ask an LLM
“How many identity providers are enabled on a given sign-up user flow?”
“What's the count of sign-in options configured for a self-service sign-up flow?”
Tell an agent
Count the identity providers on sign-up flow {flow}.
Tell me how many sign-in options sign-up flow {flow} offers.
GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/$ref List identity provider references on a sign-up flow · List identityProviders (in a user flow) #
Ask an LLM
“Can I get only the reference links of the identity providers in a sign-up flow?”
“How do I list identity provider $ref entries instead of full objects for a user flow?”
Tell an agent
List the identity provider references on sign-up flow {flow}.
Return only the identity provider $ref links for sign-up flow {flow}.
POST /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/$ref Add an identity provider to a sign-up flow · Add identityProvider (to a user flow) #
Ask an LLM
“How do I let people sign up with a social account like Google or Facebook in my user flow?”
“Can I add another identity provider to an existing self-service sign-up flow?”
Tell an agent
Add identity provider {providerRef} to sign-up flow {flow}.
Let users of sign-up flow {flow} sign in with identity provider {providerRef}.
DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/$ref Remove an identity provider from a sign-up flow by reference · Delete ref of navigation property identityProviders for identity #
Ask an LLM
“How do I remove a sign-in option using the provider's @id reference URL rather than its ID?”
“Can I unlink an identity provider from a user flow by passing its reference as a query value?”
Tell an agent destructive · confirm first
Remove the identity provider referenced by {ref} from sign-up flow {flow}.
Unlink the identity provider whose @id is {ref} from flow {flow}.
GET /identity/authenticationEventsFlows/$count Count authentication events flows · Get the number of the resource #
Ask an LLM
“How many user flows of any type exist in my tenant?”
“What's the total number of authentication events flows configured?”
Tell an agent
Count all authentication events flows in the tenant.
How many authentication events flows do I have? Give me the number.
GET /identity/authenticationEventsFlows/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow List only self-service sign-up flows · Get the items of type microsoft.graph.externalUsersSelfServiceSignUpEventsFlow… #
Ask an LLM
“Can I list just the external users self-service sign-up flows and skip other flow types?”
“Which of my authentication events flows are of the self-service sign-up type?”
Tell an agent
List only the external users self-service sign-up flows.
Show my self-service sign-up flows for external users, excluding other flow types.
GET /identity/authenticationEventsFlows/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/$count Count self-service sign-up flows · Get the number of the resource #
Ask an LLM
“How many external users self-service sign-up flows does my tenant have?”
“What's the count of flows that are specifically the self-service sign-up type?”
Tell an agent
Count the external users self-service sign-up flows.
Give me the number of self-service sign-up flows in the tenant.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identity-authenticationeventsflow-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-identity-authenticationeventsflow-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-identity-authenticationeventsflow-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.SignIns Identity.authentication Events Flow API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (74 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identity-authenticationeventsflow-api-openapi.yml