Microsoft Graph identity.identityContainer API

openapi: 3.2.0
info:
  title: Microsoft Graph Admin Admin.admin Identity.identity Container API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: identity.identityContainer
paths:
  /identity:
    description: Provides operations to manage the identityContainer singleton.
    get:
      tags:
      - identity.identityContainer
      summary: Microsoft Graph Get identity
      operationId: identity.identityContainer.GetIdentityContainer
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved entity
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.identityContainer'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - identity.identityContainer
      summary: Microsoft Graph Update identity
      operationId: identity.identityContainer.UpdateIdentityContainer
      requestBody:
        description: New property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.identityContainer'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.identityContainer'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
components:
  schemas:
    microsoft.graph.userFlowApiConnectorConfiguration:
      title: userFlowApiConnectorConfiguration
      required:
      - '@odata.type'
      type: object
      properties:
        postAttributeCollection:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.identityApiConnector'
          - type: object
            nullable: true
          x-ms-navigationProperty: true
        postFederationSignup:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.identityApiConnector'
          - type: object
            nullable: true
          x-ms-navigationProperty: true
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessLocations:
      title: conditionalAccessLocations
      required:
      - '@odata.type'
      type: object
      properties:
        excludeLocations:
          type: array
          items:
            type: string
          description: Location IDs excluded from scope of policy.
        includeLocations:
          type: array
          items:
            type: string
          description: Location IDs in scope of policy unless explicitly excluded, All, or AllTrusted.
        '@odata.type':
          type: string
    microsoft.graph.authenticationConditionsApplications:
      title: authenticationConditionsApplications
      required:
      - '@odata.type'
      type: object
      properties:
        includeApplications:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.authenticationConditionApplication'
          x-ms-navigationProperty: true
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessGuestsOrExternalUsers:
      title: conditionalAccessGuestsOrExternalUsers
      required:
      - '@odata.type'
      type: object
      properties:
        externalTenants:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessExternalTenants'
          - type: object
            nullable: true
          description: The tenant IDs of the selected types of external users. Either all B2B tenant or a collection of tenant IDs. External tenants can be specified only when the property guestOrExternalUserTypes isn't null or an empty String.
        guestOrExternalUserTypes:
          $ref: '#/components/schemas/microsoft.graph.conditionalAccessGuestOrExternalUserTypes'
        '@odata.type':
          type: string
    microsoft.graph.authenticationStrengthPolicyType:
      title: authenticationStrengthPolicyType
      enum:
      - builtIn
      - custom
      - unknownFutureValue
      type: string
    microsoft.graph.apiAuthenticationConfigurationBase:
      title: apiAuthenticationConfigurationBase
      required:
      - '@odata.type'
      type: object
      properties:
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.basicAuthentication': '#/components/schemas/microsoft.graph.basicAuthentication'
          '#microsoft.graph.clientCertificateAuthentication': '#/components/schemas/microsoft.graph.clientCertificateAuthentication'
          '#microsoft.graph.pkcs12Certificate': '#/components/schemas/microsoft.graph.pkcs12Certificate'
    microsoft.graph.conditionalAccessAuthenticationFlows:
      title: conditionalAccessAuthenticationFlows
      required:
      - '@odata.type'
      type: object
      properties:
        transferMethods:
          $ref: '#/components/schemas/microsoft.graph.conditionalAccessTransferMethods'
        '@odata.type':
          type: string
    microsoft.graph.ODataErrors.InnerError:
      title: InnerError
      required:
      - '@odata.type'
      type: object
      properties:
        request-id:
          type: string
          description: Request Id as tracked internally by the service
          nullable: true
        client-request-id:
          type: string
          description: Client request Id as sent by the client application.
          nullable: true
        date:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date when the error occured.
          format: date-time
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.identityUserFlowAttribute:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: identityUserFlowAttribute
        required:
        - '@odata.type'
        type: object
        properties:
          dataType:
            $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttributeDataType'
          description:
            type: string
            description: The description of the user flow attribute that's shown to the user at the time of sign up.
            nullable: true
          displayName:
            type: string
            description: The display name of the user flow attribute.  Supports $filter (eq, ne).
            nullable: true
          userFlowAttributeType:
            $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttributeType'
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.identityBuiltInUserFlowAttribute': '#/components/schemas/microsoft.graph.identityBuiltInUserFlowAttribute'
            '#microsoft.graph.identityCustomUserFlowAttribute': '#/components/schemas/microsoft.graph.identityCustomUserFlowAttribute'
    microsoft.graph.identityUserFlow:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: identityUserFlow
        required:
        - '@odata.type'
        type: object
        properties:
          userFlowType:
            $ref: '#/components/schemas/microsoft.graph.userFlowType'
          userFlowTypeVersion:
            oneOf:
            - type: number
              format: float
              nullable: true
            - type: string
              nullable: true
            - $ref: '#/components/schemas/ReferenceNumeric'
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.b2xIdentityUserFlow': '#/components/schemas/microsoft.graph.b2xIdentityUserFlow'
    microsoft.graph.signInFrequencyInterval:
      title: signInFrequencyInterval
      enum:
      - timeBased
      - everyTime
      - unknownFutureValue
      type: string
    microsoft.graph.customExtensionClientConfiguration:
      title: customExtensionClientConfiguration
      required:
      - '@odata.type'
      type: object
      properties:
        maximumRetries:
          maximum: 2147483647
          minimum: -2147483648
          type: number
          description: The max number of retries that Microsoft Entra ID makes to the external API. Values of 0 or 1 are supported. If null, the default for the service applies.
          format: int32
          nullable: true
        timeoutInMilliseconds:
          maximum: 2147483647
          minimum: -2147483648
          type: number
          description: The max duration in milliseconds that Microsoft Entra ID waits for a response from the external app before it shuts down the connection. The valid range is between 200 and 2000 milliseconds. Default duration is 1000.
          format: int32
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessSessionControls:
      title: conditionalAccessSessionControls
      required:
      - '@odata.type'
      type: object
      properties:
        applicationEnforcedRestrictions:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.applicationEnforcedRestrictionsSessionControl'
          - type: object
            nullable: true
          description: Session control to enforce application restrictions. Only Exchange Online and Sharepoint Online support this session control.
        cloudAppSecurity:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.cloudAppSecuritySessionControl'
          - type: object
            nullable: true
          description: Session control to apply cloud app security.
        disableResilienceDefaults:
          type: boolean
          description: Session control that determines whether it is acceptable for Microsoft Entra ID to extend existing sessions based on information collected prior to an outage or not.
          nullable: true
        persistentBrowser:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.persistentBrowserSessionControl'
          - type: object
            nullable: true
          description: Session control to define whether to persist cookies or not. All apps should be selected for this session control to work correctly.
        secureSignInSession:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.secureSignInSessionControl'
          - type: object
            nullable: true
        signInFrequency:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.signInFrequencySessionControl'
          - type: object
            nullable: true
          description: Session control to enforce signin frequency.
        '@odata.type':
          type: string
    microsoft.graph.webApplicationFirewallVerificationResult:
      title: webApplicationFirewallVerificationResult
      required:
      - '@odata.type'
      type: object
      properties:
        errors:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.genericError'
          description: List of errors encountered during the verification process.
        status:
          $ref: '#/components/schemas/microsoft.graph.webApplicationFirewallVerificationStatus'
        verifiedOnDateTime:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: UTC timestamp when the verification was performed or last updated. This indicates when the verification result was produced.
          format: date-time
        warnings:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.genericError'
          description: List of warnings produced during verification.
        '@odata.type':
          type: string
    microsoft.graph.persistentBrowserSessionMode:
      title: persistentBrowserSessionMode
      enum:
      - always
      - never
      type: string
    microsoft.graph.b2xIdentityUserFlow:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.identityUserFlow'
      - title: b2xIdentityUserFlow
        required:
        - '@odata.type'
        type: object
        properties:
          apiConnectorConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.userFlowApiConnectorConfiguration'
            - type: object
              nullable: true
            description: Configuration for enabling an API connector for use as part of the self-service sign-up user flow. You can only obtain the value of this object using Get userFlowApiConnectorConfiguration.
          identityProviders:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityProvider'
            description: The identity providers included in the user flow.
            x-ms-navigationProperty: true
          languages:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.userFlowLanguageConfiguration'
            description: The languages supported for customization within the user flow. Language customization is enabled by default in self-service sign-up user flow. You can't create custom languages in self-service sign-up user flows.
            x-ms-navigationProperty: true
          userAttributeAssignments:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttributeAssignment'
            description: The user attribute assignments included in the user flow.
            x-ms-navigationProperty: true
          userFlowIdentityProviders:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.identityProviderBase'
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.b2xIdentityUserFlow'
    microsoft.graph.conditionalAccessPolicyState:
      title: conditionalAccessPolicyState
      enum:
      - enabled
      - disabled
      - enabledForReportingButNotEnforced
      type: string
    microsoft.graph.webApplicationFirewallProviderType:
      title: webApplicationFirewallProviderType
      enum:
      - akamai
      - cloudflare
      - unknownFutureValue
      type: string
    microsoft.graph.webApplicationFirewallDnsRecordType:
      title: webApplicationFirewallDnsRecordType
      enum:
      - cname
      - unknownFutureValue
      type: string
    microsoft.graph.namedLocation:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: namedLocation
        required:
        - '@odata.type'
        type: object
        properties:
          createdDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The Timestamp type represents creation date and time of the location using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
            format: date-time
            nullable: true
          displayName:
            type: string
            description: Human-readable name of the location.
          modifiedDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The Timestamp type represents last modified date and time of the location using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
            format: date-time
            nullable: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.countryNamedLocation': '#/components/schemas/microsoft.graph.countryNamedLocation'
            '#microsoft.graph.ipNamedLocation': '#/components/schemas/microsoft.graph.ipNamedLocation'
    microsoft.graph.conditionalAccessFilter:
      title: conditionalAccessFilter
      required:
      - '@odata.type'
      type: object
      properties:
        mode:
          $ref: '#/components/schemas/microsoft.graph.filterMode'
        rule:
          type: string
          description: Rule syntax is similar to that used for membership rules for groups in Microsoft Entra ID. For details, see rules with multiple expressions
        '@odata.type':
          type: string
    microsoft.graph.authenticationStrengthPolicy:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: authenticationStrengthPolicy
        required:
        - '@odata.type'
        type: object
        properties:
          allowedCombinations:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationMethodModes'
            description: A collection of authentication method modes that are required be used to satify this authentication strength.
          createdDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The datetime when this policy was created.
            format: date-time
          description:
            type: string
            description: The human-readable description of this policy.
            nullable: true
          displayName:
            type: string
            description: The human-readable display name of this policy. Supports $filter (eq, ne, not , and in).
          modifiedDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The datetime when this policy was last modified.
            format: date-time
          policyType:
            $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicyType'
          requirementsSatisfied:
            $ref: '#/components/schemas/microsoft.graph.authenticationStrengthRequirements'
          combinationConfigurations:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
            description: Settings that may be used to require specific types or instances of an authentication method to be used when authenticating with a specified combination of authentication methods.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.authenticationStrengthPolicy'
    microsoft.graph.riskLevel:
      title: riskLevel
      enum:
      - low
      - medium
      - high
      - hidden
      - none
      - unknownFutureValue
      type: string
    microsoft.graph.conditionalAccessPolicy:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: conditionalAccessPolicy
        required:
        - '@odata.type'
        type: object
        properties:
          conditions:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessConditionSet'
          createdDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.
            format: date-time
            nullable: true
          description:
            type: string
            nullable: true
          displayName:
            type: string
            description: Specifies a display name for the conditionalAccessPolicy object.
          grantControls:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.conditionalAccessGrantControls'
            - type: object
              nullable: true
            description: Specifies the grant controls that must be fulfilled to pass the policy.
          modifiedDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Readonly.
            format: date-time
            nullable: true
          sessionControls:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControls'
            - type: object
              nullable: true
            description: Specifies the session controls that are enforced after sign-in.
          state:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessPolicyState'
          templateId:
            type: string
            description: Specifies the unique identifier of a Conditional Access template. Inherited from entity.
            nullable: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.whatIfAnalysisResult': '#/components/schemas/microsoft.graph.whatIfAnalysisResult'
    microsoft.graph.identityUserFlowAttributeType:
      title: identityUserFlowAttributeType
      enum:
      - builtIn
      - custom
      - required
      - unknownFutureValue
      type: string
    microsoft.graph.conditionalAccessPlatforms:
      title: conditionalAccessPlatforms
      required:
      - '@odata.type'
      type: object
      properties:
        excludePlatforms:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessDevicePlatform'
          description: 'The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue.'
        includePlatforms:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.conditionalAccessDevicePlatform'
          description: 'The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue.'
        '@odata.type':
          type: string
    microsoft.graph.ODataErrors.ErrorDetails:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
          nullable: true
    microsoft.graph.customExtensionEndpointConfiguration:
      title: customExtensionEndpointConfiguration
      required:
      - '@odata.type'
      type: object
      properties:
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.httpRequestEndpoint': '#/components/schemas/microsoft.graph.httpRequestEndpoint'
          '#microsoft.graph.logicAppTriggerEndpointConfiguration': '#/components/schemas/microsoft.graph.logicAppTriggerEndpointConfiguration'
    microsoft.graph.userFlowLanguageConfiguration:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: userFlowLanguageConfiguration
        required:
        - '@odata.type'
        type: object
        properties:
          displayName:
            type: string
            description: The language name to display. This property is read-only.
            nullable: true
          isEnabled:
            type: boolean
            description: Indicates whether the language is enabled within the user flow.
          defaultPages:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.userFlowLanguagePage'
            description: Collection of pages with the default content to display in a user flow for a specified language. This collection doesn't allow any kind of modification.
            x-ms-navigationProperty: true
          overridesPages:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.userFlowLanguagePage'
            description: Collection of pages with the overrides messages to display in a user flow for a specified language. This collection only allows you to modify the content of the page, any other modification isn't allowed (creation or deletion of pages).
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.userFlowLanguageConfiguration'
    microsoft.graph.identityUserFlowAttributeDataType:
      title: identityUserFlowAttributeDataType
      enum:
      - string
      - boolean
      - int64
      - stringCollection
      - dateTime
      - unknownFutureValue
      type: string
    microsoft.graph.signInFrequencySessionControl:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControl'
      - title: signInFrequencySessionControl
        required:
        - '@odata.type'
        type: object
        properties:
          authenticationType:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signInFrequencyAuthenticationType'
            - type: object
              nullable: true
            description: The possible values are primaryAndSecondaryAuthentication, secondaryAuthentication, unknownFutureValue. This property isn't required when using frequencyInterval with the value of timeBased.
          frequencyInterval:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signInFrequencyInterval'
            - type: object
              nullable: true
            description: The possible values are timeBased, everyTime, unknownFutureValue. Sign-in frequency of everyTime is available for risky users, risky sign-ins, and Intune device enrollment. For more information, see Require reauthentication every time.
          type:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signinFrequencyType'
            - type: object
              nullable: true
            description: 'The possible values are: days, hours.'
          value:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: The number of days or hours.
            format: int32
            nullable: true
          '@odata.type':
            type: string
            default: '#microsoft.graph.signInFrequencySessionControl'
      x-ms-discriminator-value: '#microsoft.graph.signInFrequencySessionControl'
    microsoft.graph.riskPreventionContainer:
      title: riskPreventionContainer
      required:
      - '@odata.type'
      type: object
      properties:
        fraudProtectionProviders:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.fraudProtectionProvider'
          description: Represents entry point for fraud protection provider configurations for Microsoft Entra External ID tenants.
          x-ms-navigationProperty: true
        webApplicationFirewallProviders:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.webApplicationFirewallProvider'
          description: Collection of WAF provider configurations registered in the External ID tenant.
          x-ms-navigationProperty: true
        webApplicationFirewallVerifications:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.webApplicationFirewallVerificationModel'
          description: Collection of verification operations performed for domains or hosts with WAF providers registered in the External ID tenant.
          x-ms-navigationProperty: true
        '@odata.type':
          type: string
    microsoft.graph.authenticationConditions:
      title: authenticationConditions
      required:
      - '@odata.type'
      type: object
      properties:
        applications:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.authenticationConditionsApplications'
          - type: object
            nullable: true
          description: Applications which trigger a custom authentication extension.
        '@odata.type':
          type: string
    microsoft.graph.identityUserFlowAttributeAssignment:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: identityUserFlowAttributeAssignment
        required:
        - '@odata.type'
        type: object
        properties:
          displayName:
            type: string
            description: The display name of the identityUserFlowAttribute within a user flow.
            nullable: true
          isOptional:
            type: boolean
            description: Determines whether the identityUserFlowAttribute is optional. true means the user doesn't have to provide a value. false means the user can't complete sign-up without providing a value.
          requiresVerification:
            type: boolean
            description: Determines whether the identityUserFlowAttribute requires verification, and is only used for verifying the user's phone number or email address.
          userAttributeValues:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.userAttributeValuesItem'
            description: The input options for the user flow attribute. Only applicable when the userInputType is radioSingleSelect, dropdownSingleSelect, or checkboxMultiSelect.
          userInputType:
            $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttributeInputType'
          userAttribute:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.identityUserFlowAttribute'
            - type: object
              nullable: true
            description: The user attribute that you want to add to your user flow.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.identityUserFlowAttributeAssignment'
    microsoft.graph.conditionalAccessInsiderRiskLevels:
      title: conditionalAccessInsiderRiskLevels
      enum:
      - minor
      - moderate
      - elevated
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.conditionalAccessSessionControl:
      title: conditionalAccessSessionControl
      required:
      - '@odata.type'
      type: object
      properties:
        isEnabled:
          type: boolean
          description: Specifies whether the session control is enabled.
          nullable: true
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@od

# --- truncated at 32 KB (202 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-identity-identitycontainer-api-openapi.yml