Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Identity.conditional Access Root API

The identity.conditionalAccessRoot API from Microsoft Entra ID (formerly Azure AD) — 36 operation(s) for identity.conditionalaccessroot.

GitHub OpenAPI

Operations 64

GET /identity/conditionalAccess/authenticationContextClassReferences List authenticationContextClassReferences #
POST /identity/conditionalAccess/authenticationContextClassReferences Create new navigation property to authenticationContextClassReferences for… #
GET /identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id} Get authenticationContextClassReference #
PATCH /identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id} Create or Update authenticationContextClassReference #
DELETE /identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id} Delete authenticationContextClassReference #
GET /identity/conditionalAccess/authenticationContextClassReferences/$count Get the number of the resource #
GET /identity/conditionalAccess/authenticationStrength Get authenticationStrength from identity #
PATCH /identity/conditionalAccess/authenticationStrength Update the navigation property authenticationStrength in identity #
DELETE /identity/conditionalAccess/authenticationStrength Delete navigation property authenticationStrength for identity #
GET /identity/conditionalAccess/authenticationStrength/authenticationMethodModes List authenticationMethodModes #
POST /identity/conditionalAccess/authenticationStrength/authenticationMethodModes Create new navigation property to authenticationMethodModes for identity #
GET /identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id} Get authenticationMethodModes from identity #
PATCH /identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id} Update the navigation property authenticationMethodModes in identity #
DELETE /identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id} Delete navigation property authenticationMethodModes for identity #
GET /identity/conditionalAccess/authenticationStrength/authenticationMethodModes/$count Get the number of the resource #
GET /identity/conditionalAccess/authenticationStrength/policies Get policies from identity #
POST /identity/conditionalAccess/authenticationStrength/policies Create new navigation property to policies for identity #
GET /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id} Get policies from identity #
PATCH /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id} Update the navigation property policies in identity #
DELETE /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id} Delete navigation property policies for identity #
GET /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations List combinationConfigurations #
POST /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations Create authenticationCombinationConfiguration #
GET /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id} Get authenticationCombinationConfiguration #
PATCH /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id} Update authenticationCombinationConfiguration #
DELETE /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id} Delete authenticationCombinationConfiguration #
GET /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/$count Get the number of the resource #
POST /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/microsoft.graph.updateAllowedCombinations Invoke action updateAllowedCombinations #
GET /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/microsoft.graph.usage() Invoke function usage #
GET /identity/conditionalAccess/authenticationStrength/policies/$count Get the number of the resource #
GET /identity/conditionalAccess/deletedItems Get deletedItems from identity #
PATCH /identity/conditionalAccess/deletedItems Update the navigation property deletedItems in identity #
DELETE /identity/conditionalAccess/deletedItems Delete navigation property deletedItems for identity #
GET /identity/conditionalAccess/deletedItems/namedLocations Get namedLocations from identity #
POST /identity/conditionalAccess/deletedItems/namedLocations Create new navigation property to namedLocations for identity #
GET /identity/conditionalAccess/deletedItems/namedLocations/{namedLocation-id} Get namedLocations from identity #
PATCH /identity/conditionalAccess/deletedItems/namedLocations/{namedLocation-id} Update the navigation property namedLocations in identity #
DELETE /identity/conditionalAccess/deletedItems/namedLocations/{namedLocation-id} Delete navigation property namedLocations for identity #
POST /identity/conditionalAccess/deletedItems/namedLocations/{namedLocation-id}/microsoft.graph.restore Invoke action restore #
GET /identity/conditionalAccess/deletedItems/namedLocations/$count Get the number of the resource #
GET /identity/conditionalAccess/deletedItems/policies Get policies from identity #
POST /identity/conditionalAccess/deletedItems/policies Create new navigation property to policies for identity #
GET /identity/conditionalAccess/deletedItems/policies/{conditionalAccessPolicy-id} Get policies from identity #
PATCH /identity/conditionalAccess/deletedItems/policies/{conditionalAccessPolicy-id} Update the navigation property policies in identity #
DELETE /identity/conditionalAccess/deletedItems/policies/{conditionalAccessPolicy-id} Delete navigation property policies for identity #
POST /identity/conditionalAccess/deletedItems/policies/{conditionalAccessPolicy-id}/microsoft.graph.restore Invoke action restore #
GET /identity/conditionalAccess/deletedItems/policies/$count Get the number of the resource #
POST /identity/conditionalAccess/microsoft.graph.evaluate Invoke action evaluate #
GET /identity/conditionalAccess/namedLocations List namedLocations #
POST /identity/conditionalAccess/namedLocations Create namedLocation #
GET /identity/conditionalAccess/namedLocations/{namedLocation-id} Get countryNamedLocation #
PATCH /identity/conditionalAccess/namedLocations/{namedLocation-id} Update countryNamedLocation #
DELETE /identity/conditionalAccess/namedLocations/{namedLocation-id} Delete countryNamedLocation #
POST /identity/conditionalAccess/namedLocations/{namedLocation-id}/microsoft.graph.restore Invoke action restore #
GET /identity/conditionalAccess/namedLocations/$count Get the number of the resource #
GET /identity/conditionalAccess/policies List policies #
POST /identity/conditionalAccess/policies Create conditionalAccessPolicy #
GET /identity/conditionalAccess/policies/{conditionalAccessPolicy-id} Get conditionalAccessPolicy #
PATCH /identity/conditionalAccess/policies/{conditionalAccessPolicy-id} Update conditionalaccesspolicy #
DELETE /identity/conditionalAccess/policies/{conditionalAccessPolicy-id} Delete conditionalAccessPolicy #
POST /identity/conditionalAccess/policies/{conditionalAccessPolicy-id}/microsoft.graph.restore Invoke action restore #
GET /identity/conditionalAccess/policies/$count Get the number of the resource #
GET /identity/conditionalAccess/templates List conditionalAccessTemplates #
GET /identity/conditionalAccess/templates/{conditionalAccessTemplate-id} Get conditionalAccessTemplate #
GET /identity/conditionalAccess/templates/$count Get the number of the resource #

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identity-conditionalaccessroot-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad-identity-conditionalaccessroot-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-identity-conditionalaccessroot-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.SignIns Identity.conditional Access Root API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (120 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identity-conditionalaccessroot-api-openapi.yml