Microsoft Graph identity.identityContainer API

The identity.identityContainer API from Microsoft Graph — 1 operation(s) for identity.identitycontainer.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/admin?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/agreementacceptance?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/agreement?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/teamsapp?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/applicationtemplate?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodconfiguration?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodspolicy?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/certificatebasedauthconfiguration?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/communications-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/complianceapioverview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-externalconnection?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/contact?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/contract?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/copilot-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/datapolicyoperation?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/intune-apps-conceptual?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/intune-device-conceptual?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/device?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/directory?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/domaindnsrecord?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/domain?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/drive?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/education-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/employee-experience-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-external?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/filter-query-parameter
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/excel?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/grouplifecyclepolicy?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/groupsetting?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/groupsettingtemplate?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/identitycontainer?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/informationprotection?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/invitation?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/users?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/oauth2permissiongrant?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/organization?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/resourcespecificpermissiongrant?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/place?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/planner-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/print?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/privacy?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/rolemanagement?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/schemaextension?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/scopedrolemembership?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/search-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/shares?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/sharepoint?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/solutions-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/filestorage?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/subscribedsku?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/subscription?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/teams-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/teamwork?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/tenantrelationship?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/auth/auth-concepts
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/workplace?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/sitepage?view=graph-rest-1.0

Specifications

Other Resources

OpenAPI Specification

microsoft-graph-identity-identitycontainer-api-openapi.yml Raw ↑
openapi: 3.1.0
info:
  title: Microsoft Graph Admin Admin.admin identity.identityContainer API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: identity.identityContainer
paths:
  /identity:
    description: Provides operations to manage the identityContainer singleton.
    get:
      tags:
      - identity.identityContainer
      summary: Microsoft Graph Get identity
      operationId: identity.identityContainer.GetIdentityContainer
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved entity
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.identityContainer'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - identity.identityContainer
      summary: Microsoft Graph Update identity
      operationId: identity.identityContainer.UpdateIdentityContainer
      requestBody:
        description: New property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.identityContainer'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.identityContainer'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
components:
  schemas:
    microsoft.graph.filterMode:
      title: filterMode
      enum:
      - include
      - exclude
      type: string
    microsoft.graph.authenticationStrengthRoot:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: authenticationStrengthRoot
        required:
        - '@odata.type'
        type: object
        properties:
          combinations:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationMethodModes'
          authenticationMethodModes:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationMethodModeDetail'
            description: Names and descriptions of all valid authentication method modes in the system.
            x-ms-navigationProperty: true
          policies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicy'
            description: A collection of authentication strength policies that exist for this tenant, including both built-in and custom policies.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.authenticationStrengthRoot'
    ReferenceNumeric:
      enum:
      - -INF
      - INF
      - NaN
      type: string
      nullable: true
    microsoft.graph.identityUserFlowAttributeDataType:
      title: identityUserFlowAttributeDataType
      enum:
      - string
      - boolean
      - int64
      - stringCollection
      - dateTime
      - unknownFutureValue
      type: string
    microsoft.graph.authenticationConditions:
      title: authenticationConditions
      required:
      - '@odata.type'
      type: object
      properties:
        applications:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.authenticationConditionsApplications'
          - type: object
            nullable: true
          description: Applications which trigger a custom authentication extension.
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessPolicyState:
      title: conditionalAccessPolicyState
      enum:
      - enabled
      - disabled
      - enabledForReportingButNotEnforced
      type: string
    microsoft.graph.conditionalAccessGrantControl:
      title: conditionalAccessGrantControl
      enum:
      - block
      - mfa
      - compliantDevice
      - domainJoinedDevice
      - approvedApplication
      - compliantApplication
      - passwordChange
      - unknownFutureValue
      type: string
    microsoft.graph.webApplicationFirewallVerificationStatus:
      title: webApplicationFirewallVerificationStatus
      enum:
      - success
      - warning
      - failure
      - unknownFutureValue
      type: string
    microsoft.graph.conditionalAccessDevicePlatform:
      title: conditionalAccessDevicePlatform
      enum:
      - android
      - iOS
      - windows
      - windowsPhone
      - macOS
      - all
      - unknownFutureValue
      - linux
      type: string
    microsoft.graph.conditionalAccessExternalTenantsMembershipKind:
      title: conditionalAccessExternalTenantsMembershipKind
      enum:
      - all
      - enumerated
      - unknownFutureValue
      type: string
    microsoft.graph.conditionalAccessInsiderRiskLevels:
      title: conditionalAccessInsiderRiskLevels
      enum:
      - minor
      - moderate
      - elevated
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.signInFrequencySessionControl:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControl'
      - title: signInFrequencySessionControl
        required:
        - '@odata.type'
        type: object
        properties:
          authenticationType:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signInFrequencyAuthenticationType'
            - type: object
              nullable: true
            description: The possible values are primaryAndSecondaryAuthentication, secondaryAuthentication, unknownFutureValue. This property isn't required when using frequencyInterval with the value of timeBased.
          frequencyInterval:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signInFrequencyInterval'
            - type: object
              nullable: true
            description: The possible values are timeBased, everyTime, unknownFutureValue. Sign-in frequency of everyTime is available for risky users, risky sign-ins, and Intune device enrollment. For more information, see Require reauthentication every time.
          type:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signinFrequencyType'
            - type: object
              nullable: true
            description: 'The possible values are: days, hours.'
          value:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: The number of days or hours.
            format: int32
            nullable: true
          '@odata.type':
            type: string
            default: '#microsoft.graph.signInFrequencySessionControl'
      x-ms-discriminator-value: '#microsoft.graph.signInFrequencySessionControl'
    microsoft.graph.userFlowType:
      title: userFlowType
      enum:
      - signUp
      - signIn
      - signUpOrSignIn
      - passwordReset
      - profileUpdate
      - resourceOwner
      - unknownFutureValue
      type: string
    microsoft.graph.webApplicationFirewallVerifiedDetails:
      title: webApplicationFirewallVerifiedDetails
      required:
      - '@odata.type'
      type: object
      properties:
        dnsConfiguration:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.webApplicationFirewallDnsConfiguration'
          - type: object
            nullable: true
          description: DNS-related details discovered during verification for the host, such as the DNS record name, record type, record value, whether the record is proxied through the provider, and whether the domain is verified.
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.akamaiVerifiedDetailsModel': '#/components/schemas/microsoft.graph.akamaiVerifiedDetailsModel'
          '#microsoft.graph.cloudFlareVerifiedDetailsModel': '#/components/schemas/microsoft.graph.cloudFlareVerifiedDetailsModel'
    microsoft.graph.baseAuthenticationMethod:
      title: baseAuthenticationMethod
      enum:
      - password
      - voice
      - hardwareOath
      - softwareOath
      - sms
      - fido2
      - windowsHelloForBusiness
      - microsoftAuthenticator
      - temporaryAccessPass
      - email
      - x509Certificate
      - federation
      - unknownFutureValue
      type: string
    microsoft.graph.identityContainer:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: identityContainer
        required:
        - '@odata.type'
        type: object
        properties:
          apiConnectors:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityApiConnector'
            description: Represents entry point for API connectors.
            x-ms-navigationProperty: true
          authenticationEventListeners:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationEventListener'
            description: Represents listeners for custom authentication extension events in Azure AD for workforce and customers.
            x-ms-navigationProperty: true
          authenticationEventsFlows:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationEventsFlow'
            description: Represents the entry point for self-service sign-up and sign-in user flows in both Microsoft Entra workforce and external tenants.
            x-ms-navigationProperty: true
          b2xUserFlows:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.b2xIdentityUserFlow'
            description: Represents entry point for B2X/self-service sign-up identity userflows.
            x-ms-navigationProperty: true
          conditionalAccess:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.conditionalAccessRoot'
            - type: object
              nullable: true
            description: the entry point for the Conditional Access (CA) object model.
            x-ms-navigationProperty: true
          customAuthenticationExtensions:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.customAuthenticationExtension'
            description: Represents custom extensions to authentication flows in Azure AD for workforce and customers.
            x-ms-navigationProperty: true
          identityProviders:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityProviderBase'
            x-ms-navigationProperty: true
          riskPrevention:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.riskPreventionContainer'
            - type: object
              nullable: true
            description: Represents the entry point for fraud and risk prevention configurations in Microsoft Entra External ID, including third-party provider settings.
            x-ms-navigationProperty: true
          userFlowAttributes:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttribute'
            description: Represents entry point for identity userflow attributes.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.identityContainer'
    microsoft.graph.webApplicationFirewallDnsRecordType:
      title: webApplicationFirewallDnsRecordType
      enum:
      - cname
      - unknownFutureValue
      type: string
    microsoft.graph.authenticationEventListener:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: authenticationEventListener
        required:
        - '@odata.type'
        type: object
        properties:
          authenticationEventsFlowId:
            type: string
            description: The identifier of the authenticationEventsFlow object.
            nullable: true
          conditions:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.authenticationConditions'
            - type: object
              nullable: true
            description: The conditions on which this authenticationEventListener should trigger.
          displayName:
            type: string
            description: The display name of the listener.
            nullable: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.onAttributeCollectionListener': '#/components/schemas/microsoft.graph.onAttributeCollectionListener'
            '#microsoft.graph.onAttributeCollectionStartListener': '#/components/schemas/microsoft.graph.onAttributeCollectionStartListener'
            '#microsoft.graph.onAttributeCollectionSubmitListener': '#/components/schemas/microsoft.graph.onAttributeCollectionSubmitListener'
            '#microsoft.graph.onAuthenticationMethodLoadStartListener': '#/components/schemas/microsoft.graph.onAuthenticationMethodLoadStartListener'
            '#microsoft.graph.onEmailOtpSendListener': '#/components/schemas/microsoft.graph.onEmailOtpSendListener'
            '#microsoft.graph.onFraudProtectionLoadStartListener': '#/components/schemas/microsoft.graph.onFraudProtectionLoadStartListener'
            '#microsoft.graph.onInteractiveAuthFlowStartListener': '#/components/schemas/microsoft.graph.onInteractiveAuthFlowStartListener'
            '#microsoft.graph.onTokenIssuanceStartListener': '#/components/schemas/microsoft.graph.onTokenIssuanceStartListener'
            '#microsoft.graph.onUserCreateStartListener': '#/components/schemas/microsoft.graph.onUserCreateStartListener'
    microsoft.graph.conditionalAccessTransferMethods:
      title: conditionalAccessTransferMethods
      enum:
      - none
      - deviceCodeFlow
      - authenticationTransfer
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.conditionalAccessConditionSet:
      title: conditionalAccessConditionSet
      required:
      - '@odata.type'
      type: object
      properties:
        applications:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessApplications'
          - type: object
            nullable: true
          description: Applications and user actions included in and excluded from the policy. Required.
        authenticationFlows:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessAuthenticationFlows'
          - type: object
            nullable: true
          description: Authentication flows included in the policy scope.
        clientApplications:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessClientApplications'
          - type: object
            nullable: true
          description: Client applications (service principals and workload identities) included in and excluded from the policy. Either users or clientApplications is required.
        clientAppTypes:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessClientApp'
          description: 'Client application types included in the policy. The possible values are: all, browser, mobileAppsAndDesktopClients, exchangeActiveSync, easSupported, other. Required.  The easUnsupported enumeration member will be deprecated in favor of exchangeActiveSync, which includes EAS supported and unsupported platforms.'
        devices:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessDevices'
          - type: object
            nullable: true
          description: Devices in the policy.
        insiderRiskLevels:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessInsiderRiskLevels'
          - type: object
            nullable: true
          description: 'Insider risk levels included in the policy. The possible values are: minor, moderate, elevated, unknownFutureValue.'
        locations:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessLocations'
          - type: object
            nullable: true
          description: Locations included in and excluded from the policy.
        platforms:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessPlatforms'
          - type: object
            nullable: true
          description: Platforms included in and excluded from the policy.
        servicePrincipalRiskLevels:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.riskLevel'
          description: 'Service principal risk levels included in the policy. The possible values are: low, medium, high, none, unknownFutureValue.'
        signInRiskLevels:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.riskLevel'
          description: 'Sign-in risk levels included in the policy. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Required.'
        userRiskLevels:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.riskLevel'
          description: 'User risk levels included in the policy. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Required.'
        users:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessUsers'
          - type: object
            nullable: true
          description: Users, groups, and roles included in and excluded from the policy. Either users or clientApplications is required.
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessGuestOrExternalUserTypes:
      title: conditionalAccessGuestOrExternalUserTypes
      enum:
      - none
      - internalGuest
      - b2bCollaborationGuest
      - b2bCollaborationMember
      - b2bDirectConnectUser
      - otherExternalUser
      - serviceProvider
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.userAttributeValuesItem:
      title: userAttributeValuesItem
      required:
      - '@odata.type'
      type: object
      properties:
        isDefault:
          type: boolean
          description: Determines whether the value is set as the default.
        name:
          type: string
          description: The display name of the property displayed to the user in the user flow.
          nullable: true
        value:
          type: string
          description: The value that is set when this item is selected.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.userFlowApiConnectorConfiguration:
      title: userFlowApiConnectorConfiguration
      required:
      - '@odata.type'
      type: object
      properties:
        postAttributeCollection:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.identityApiConnector'
          - type: object
            nullable: true
          x-ms-navigationProperty: true
        postFederationSignup:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.identityApiConnector'
          - type: object
            nullable: true
          x-ms-navigationProperty: true
        '@odata.type':
          type: string
    microsoft.graph.templateScenarios:
      title: templateScenarios
      enum:
      - new
      - secureFoundation
      - zeroTrust
      - remoteWork
      - protectAdmins
      - emergingThreats
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.conditionalAccessTemplate:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: conditionalAccessTemplate
        required:
        - '@odata.type'
        type: object
        properties:
          description:
            type: string
            description: The user-friendly name of the template.
          details:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessPolicyDetail'
          name:
            type: string
            description: The user-friendly name of the template.
          scenarios:
            $ref: '#/components/schemas/microsoft.graph.templateScenarios'
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.conditionalAccessTemplate'
    microsoft.graph.webApplicationFirewallProvider:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: webApplicationFirewallProvider
        required:
        - '@odata.type'
        type: object
        properties:
          displayName:
            type: string
            description: The display name of the WAF provider.
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.akamaiWebApplicationFirewallProvider': '#/components/schemas/microsoft.graph.akamaiWebApplicationFirewallProvider'
            '#microsoft.graph.cloudFlareWebApplicationFirewallProvider': '#/components/schemas/microsoft.graph.cloudFlareWebApplicationFirewallProvider'
    microsoft.graph.identityUserFlowAttributeType:
      title: identityUserFlowAttributeType
      enum:
      - builtIn
      - custom
      - required
      - unknownFutureValue
      type: string
    microsoft.graph.b2xIdentityUserFlow:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.identityUserFlow'
      - title: b2xIdentityUserFlow
        required:
        - '@odata.type'
        type: object
        properties:
          apiConnectorConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.userFlowApiConnectorConfiguration'
            - type: object
              nullable: true
            description: Configuration for enabling an API connector for use as part of the self-service sign-up user flow. You can only obtain the value of this object using Get userFlowApiConnectorConfiguration.
          identityProviders:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityProvider'
            description: The identity providers included in the user flow.
            x-ms-navigationProperty: true
          languages:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.userFlowLanguageConfiguration'
            description: The languages supported for customization within the user flow. Language customization is enabled by default in self-service sign-up user flow. You can't create custom languages in self-service sign-up user flows.
            x-ms-navigationProperty: true
          userAttributeAssignments:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttributeAssignment'
            description: The user attribute assignments included in the user flow.
            x-ms-navigationProperty: true
          userFlowIdentityProviders:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityProviderBase'
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.b2xIdentityUserFlow'
    microsoft.graph.conditionalAccessPolicy:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: conditionalAccessPolicy
        required:
        - '@odata.type'
        type: object
        properties:
          conditions:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessConditionSet'
          createdDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.
            format: date-time
            nullable: true
          description:
            type: string
            nullable: true
          displayName:
            type: string
            description: Specifies a display name for the conditionalAccessPolicy object.
          grantControls:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.conditionalAccessGrantControls'
            - type: object
              nullable: true
            description: Specifies the grant controls that must be fulfilled to pass the policy.
          modifiedDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.
            format: date-time
            nullable: true
          sessionControls:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControls'
            - type: object
              nullable: true
            description: Specifies the session controls that are enforced after sign-in.
          state:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessPolicyState'
          templateId:
            type: string
            description: Specifies the unique identifier of a Conditional Access template. Inherited from entity.
            nullable: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.whatIfAnalysisResult': '#/components/schemas/microsoft.graph.whatIfAnalysisResult'
    microsoft.graph.identityApiConnector:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: identityApiConnector
        required:
        - '@odata.type'
        type: object
        properties:
          authenticationConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.apiAuthenticationConfigurationBase'
            - type: object
              nullable: true
            description: The object which describes the authentication configuration details for calling the API. Basic and PKCS 12 client certificate are supported.
          displayName:
            type: string
            description: The name of the API connector.
            nullable: true
          targetUrl:
            type: string
            description: The URL of the API endpoint to call.
            nullable: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.identityApiConnector'
    microsoft.graph.signInFrequencyInterval:
      title: signInFrequencyInterval
      enum:
      - timeBased
      - everyTime
      - unknownFutureValue
      type: string
    microsoft.graph.conditionalAccessFilter:
      title: conditionalAccessFilter
      required:
      - '@odata.type'
      type: object
      properties:
        mode:
          $ref: '#/components/schemas/microsoft.graph.filterMode'
        rule:
          type: string
          description: Rule syntax is similar to that used for membership rules for groups in Microsoft Entra ID. For details, see rules with multiple expressions
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessPolicyDetail:
      title: conditionalAccessPolicyDetail
      required:
      - '@odata.type'
      type: object
      properties:
        conditions:
          $ref: '#/components/schemas/microsoft.graph.conditionalAccessConditionSet'
        grantControls:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessGrantControls'
          - type: object
            nullable: true
          description: Represents grant controls that must be fulfilled for the policy.
        sessionControls:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControls'
          - type: object
            nullable: true
          description: Represents a complex type of session controls that is enforced after sign-in.
        '@odata.type':
          type: string
    microsoft.graph.customCalloutExtension:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: customCalloutExtension
        required:
        - '@odata.type'
        type: object
        properties:
          authenticationConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.customExtensionAuthenticationConfiguration'
            - type: object
              nullable: true
            description: Configuration for securing the API call to the logic app. For example, using OAuth client credentials flow.
          clientConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.customExtensionClientConfiguration'
            - type: object
              nullable: true
            description: HTTP connection settings that define how long Microsoft Entra ID can wait for a connection to a logic app, how many times you can retry a timed-out connection and the exception scenarios when retries are allowed.
          description:
            type: string
            description: Description for the customCalloutExtension object.
            nullable: true
          displayName:
            type: string
            description: Display name for the customCalloutExtension object.
            nullable: true
          endpointConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.customExtensionEndpointConfiguration'
            - type: object
              nullable: true
            description: The type and details for configuring the endpoint to call the logic app's workflow.
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.accessPackageAssignmentRequestWorkflowExtension': '#/components/schemas/microsoft.graph.accessPackageAssignmentRequestWorkflowExtension'
            '#microsoft.graph.accessPackageAssignmentWorkflowExtension': '#/components/schemas/microsoft.graph.accessPackageAssignmentWorkflowExtension'
            '#microsoft.graph.customAuthenticationExtension': '#/components/schemas/microsoft.graph.customAuthenticationExtension'
            '#microsoft.graph.onAttributeCollectionStartCustomExtension': '#/components/schemas/microsoft.graph.onAttributeCollectionStartCustomExtension'
            '#microsoft.graph.onAttributeCollectionSubmitCustomExtension': '#/components/schemas/microsoft.graph.onAttributeCollectionSubmitCustomExtension'
            '#microsoft.graph.onOtpSendCustomExtension': '#/com

# --- truncated at 32 KB (202 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-identity-identitycontainer-api-openapi.yml