Microsoft Graph

Microsoft Graph policies.authenticationStrengthPolicy API

The policies.authenticationStrengthPolicy API from Microsoft Graph — 8 operation(s) for policies.authenticationstrengthpolicy.

Documentation GitHub OpenAPI

Operations 14

GET /policies/authenticationStrengthPolicies Microsoft Graph List authenticationStrengthPolicies #

POST /policies/authenticationStrengthPolicies Microsoft Graph Create authenticationStrengthPolicy #

GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id} Microsoft Graph Get authenticationStrengthPolicy #

PATCH /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id} Microsoft Graph Update authenticationStrengthPolicy #

DELETE /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id} Microsoft Graph Delete authenticationStrengthPolicy #

GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations Microsoft Graph Get combinationConfigurations from policies #

POST /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations Microsoft Graph Create new navigation property to combinationConfigurations for policies #

GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id} Microsoft Graph Get combinationConfigurations from policies #

PATCH /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id} Microsoft Graph Update the navigation property combinationConfigurations in policies #

DELETE /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id} Microsoft Graph Delete navigation property combinationConfigurations for policies #

GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations/$count Microsoft Graph Get the number of the resource #

POST /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/updateAllowedCombinations Microsoft Graph Invoke action updateAllowedCombinations #

GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/usage() Microsoft Graph Invoke function usage #

GET /policies/authenticationStrengthPolicies/$count Microsoft Graph Get the number of the resource #

Documentation

https://learn.microsoft.com/en-us/graph/api/resources/admin?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/agreementacceptance?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/agreement?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teamsapp?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/applicationtemplate?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodconfiguration?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodspolicy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/certificatebasedauthconfiguration?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/communications-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/complianceapioverview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-externalconnection?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/contact?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/contract?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/copilot-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/datapolicyoperation?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/intune-apps-conceptual?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/intune-device-conceptual?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/device?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/directory?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/domaindnsrecord?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/domain?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/drive?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/education-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/employee-experience-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-external?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/filter-query-parameter

https://learn.microsoft.com/en-us/graph/api/resources/excel?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/grouplifecyclepolicy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groupsetting?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groupsettingtemplate?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/identitycontainer?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/informationprotection?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/invitation?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/users?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/oauth2permissiongrant?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/organization?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/resourcespecificpermissiongrant?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/place?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/planner-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/print?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/privacy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/rolemanagement?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/schemaextension?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/scopedrolemembership?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/search-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/shares?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/sharepoint?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/solutions-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/filestorage?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/subscribedsku?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/subscription?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teams-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teamwork?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/tenantrelationship?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/auth/auth-concepts

https://learn.microsoft.com/en-us/graph/api/resources/workplace?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/sitepage?view=graph-rest-1.0

Specifications

https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-policies-authenticationstrengthpolicy-api-openapi.yml

Other Resources

https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/graphql/microsoft-graph-graphql.md

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/microsoft-graph-policies-authenticationstrengthpolicy-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Microsoft Graph Admin Admin.admin Policies.authentication Strength Policy API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: policies.authenticationStrengthPolicy
  x-ms-docs-toc-type: page
paths:
  /policies/authenticationStrengthPolicies:
    description: Provides operations to manage the authenticationStrengthPolicies property of the microsoft.graph.policyRoot entity.
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph List authenticationStrengthPolicies
      description: Get a list of the authenticationStrengthPolicy objects and their properties. This API returns both built-in and custom policies.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthroot-list-policies?view=graph-rest-1.0
      operationId: policies.ListAuthenticationStrengthPolicies
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.authenticationStrengthPolicyCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Create authenticationStrengthPolicy
      description: Create a new custom authenticationStrengthPolicy object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthroot-post-policies?view=graph-rest-1.0
      operationId: policies.CreateAuthenticationStrengthPolicies
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicy'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicy'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}:
    description: Provides operations to manage the authenticationStrengthPolicies property of the microsoft.graph.policyRoot entity.
    parameters:
    - name: authenticationStrengthPolicy-id
      in: path
      description: The unique identifier of authenticationStrengthPolicy
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationStrengthPolicy
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Get authenticationStrengthPolicy
      description: Read the properties and relationships of an authenticationStrengthPolicy object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-get?view=graph-rest-1.0
      operationId: policies.GetAuthenticationStrengthPolicies
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicy'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Update authenticationStrengthPolicy
      description: Update the properties of an authenticationStrengthPolicy object. You cannot update the allowed auth method combinations using this request. To do so, use the Update allowed combinations action.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-update?view=graph-rest-1.0
      operationId: policies.UpdateAuthenticationStrengthPolicies
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicy'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.authenticationStrengthPolicy'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Delete authenticationStrengthPolicy
      description: Delete a custom authenticationStrengthPolicy object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthroot-delete-policies?view=graph-rest-1.0
      operationId: policies.DeleteAuthenticationStrengthPolicies
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations:
    description: Provides operations to manage the combinationConfigurations property of the microsoft.graph.authenticationStrengthPolicy entity.
    parameters:
    - name: authenticationStrengthPolicy-id
      in: path
      description: The unique identifier of authenticationStrengthPolicy
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationStrengthPolicy
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Get combinationConfigurations from policies
      description: Settings that may be used to require specific types or instances of an authentication method to be used when authenticating with a specified combination of authentication methods.
      operationId: policies.authenticationStrengthPolicies.ListCombinationConfigurations
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.authenticationCombinationConfigurationCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Create new navigation property to combinationConfigurations for policies
      operationId: policies.authenticationStrengthPolicies.CreateCombinationConfigurations
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  ? /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id}
  : description: Provides operations to manage the combinationConfigurations property of the microsoft.graph.authenticationStrengthPolicy entity.
    parameters:
    - name: authenticationStrengthPolicy-id
      in: path
      description: The unique identifier of authenticationStrengthPolicy
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationStrengthPolicy
    - name: authenticationCombinationConfiguration-id
      in: path
      description: The unique identifier of authenticationCombinationConfiguration
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationCombinationConfiguration
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Get combinationConfigurations from policies
      description: Settings that may be used to require specific types or instances of an authentication method to be used when authenticating with a specified combination of authentication methods.
      operationId: policies.authenticationStrengthPolicies.GetCombinationConfigurations
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Update the navigation property combinationConfigurations in policies
      operationId: policies.authenticationStrengthPolicies.UpdateCombinationConfigurations
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Delete navigation property combinationConfigurations for policies
      operationId: policies.authenticationStrengthPolicies.DeleteCombinationConfigurations
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/combinationConfigurations/$count:
    description: Provides operations to count the resources in the collection.
    parameters:
    - name: authenticationStrengthPolicy-id
      in: path
      description: The unique identifier of authenticationStrengthPolicy
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationStrengthPolicy
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Get the number of the resource
      operationId: policies.authenticationStrengthPolicies.combinationConfigurations.GetCount-7b5f
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/updateAllowedCombinations:
    description: Provides operations to call the updateAllowedCombinations method.
    parameters:
    - name: authenticationStrengthPolicy-id
      in: path
      description: The unique identifier of authenticationStrengthPolicy
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationStrengthPolicy
    post:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Invoke action updateAllowedCombinations
      description: Update the allowedCombinations property of an authenticationStrengthPolicy object. To update other properties of an authenticationStrengthPolicy object, use the Update authenticationStrengthPolicy method.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-updateallowedcombinations?view=graph-rest-1.0
      operationId: policies.authenticationStrengthPolicies.authenticationStrengthPolicy.updateAllowedCombinations
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                allowedCombinations:
                  type: array
                  items:
                    anyOf:
                    - $ref: '#/components/schemas/microsoft.graph.authenticationMethodModes'
                    - type: object
                      nullable: true
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                anyOf:
                - $ref: '#/components/schemas/microsoft.graph.updateAllowedCombinationsResult'
                - type: object
                  nullable: true
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /policies/authenticationStrengthPolicies/{authenticationStrengthPolicy-id}/usage():
    description: Provides operations to call the usage method.
    parameters:
    - name: authenticationStrengthPolicy-id
      in: path
      description: The unique identifier of authenticationStrengthPolicy
      required: true
      schema:
        type: string
      x-ms-docs-key-type: authenticationStrengthPolicy
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Invoke function usage
      description: Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/authenticationstrengthpolicy-usage?view=graph-rest-1.0
      operationId: policies.authenticationStrengthPolicies.authenticationStrengthPolicy.usage
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                anyOf:
                - $ref: '#/components/schemas/microsoft.graph.authenticationStrengthUsage'
                - type: object
                  nullable: true
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: function
  /policies/authenticationStrengthPolicies/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
      - policies.authenticationStrengthPolicy
      summary: Microsoft Graph Get the number of the resource
      operationId: policies.authenticationStrengthPolicies.GetCount-db73
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
components:
  schemas:
    ODataCountResponse:
      type: integer
      format: int32
    microsoft.graph.ODataErrors.ErrorDetails:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
          nullable: true
    microsoft.graph.conditionalAccessLocations:
      title: conditionalAccessLocations
      required:
      - '@odata.type'
      type: object
      properties:
        excludeLocations:
          type: array
          items:
            type: string
          description: Location IDs excluded from scope of policy.
        includeLocations:
          type: array
          items:
            type: string
          description: Location IDs in scope of policy unless explicitly excluded, All, or AllTrusted.
        '@odata.type':
          type: string
    microsoft.graph.cloudAppSecuritySessionControlType:
      title: cloudAppSecuritySessionControlType
      enum:
      - mcasConfigured
      - monitorOnly
      - blockDownloads
      - unknownFutureValue
      type: string
    microsoft.graph.conditionalAccessGuestsOrExternalUsers:
      title: conditionalAccessGuestsOrExternalUsers
      required:
      - '@odata.type'
      type: object
      properties:
        externalTenants:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessExternalTenants'
          - type: object
            nullable: true
          description: The tenant IDs of the selected types of external users. Either all B2B tenant or a collection of tenant IDs. External tenants can be specified only when the property guestOrExternalUserTypes isn't null or an empty String.
        guestOrExternalUserTypes:
          $ref: '#/components/schemas/microsoft.graph.conditionalAccessGuestOrExternalUserTypes'
        '@odata.type':
          type: string
    microsoft.graph.cloudAppSecuritySessionControl:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControl'
      - title: cloudAppSecuritySessionControl
        required:
        - '@odata.type'
        type: object
        properties:
          cloudAppSecurityType:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.cloudAppSecuritySessionControlType'
            - type: object
              nullable: true
            description: 'The possible values are: mcasConfigured, monitorOnly, blockDownloads, unknownFutureValue. For more information, see Deploy Conditional Access App Control for featured apps.'
          '@odata.type':
            type: string
            default: '#microsoft.graph.cloudAppSecuritySessionControl'
      x-ms-discriminator-value: '#microsoft.graph.cloudAppSecuritySessionControl'
    microsoft.graph.authenticationStrengthPolicyType:
      title: authenticationStrengthPolicyType
      enum:
      - builtIn
      - custom
      - unknownFutureValue
      type: string
    microsoft.graph.signInFrequencySessionControl:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControl'
      - title: signInFrequencySessionControl
        required:
        - '@odata.type'
        type: object
        properties:
          authenticationType:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signInFrequencyAuthenticationType'
            - type: object
              nullable: true
            description: The possible values are primaryAndSecondaryAuthentication, secondaryAuthentication, unknownFutureValue. This property isn't required when using frequencyInterval with the value of timeBased.
          frequencyInterval:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signInFrequencyInterval'
            - type: object
              nullable: true
            description: The possible values are timeBased, everyTime, unknownFutureValue. Sign-in frequency of everyTime is available for risky users, risky sign-ins, and Intune device enrollment. For more information, see Require reauthentication every time.
          type:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.signinFrequencyType'
            - type: object
              nullable: true
            description: 'The possible values are: days, hours.'
          value:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: The number of days or hours.
            format: int32
            nullable: true
          '@odata.type':
            type: string
            default: '#microsoft.graph.signInFrequencySessionControl'
      x-ms-discriminator-value: '#microsoft.graph.signInFrequencySessionControl'
    microsoft.graph.conditionalAccessAuthenticationFlows:
      title: conditionalAccessAuthenticationFlows
      required:
      - '@odata.type'
      type: object
      properties:
        transferMethods:
          $ref: '#/components/schemas/microsoft.graph.conditionalAccessTransferMethods'
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessExternalTenants:
      title: conditionalAccessExternalTenants
      required:
      - '@odata.type'
      type: object
      properties:
        membershipKind:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessExternalTenantsMembershipKind'
          - type: object
            nullable: true
          description: 'The membership kind. The possible values are: all, enumerated, unknownFutureValue. The enumerated member references an conditionalAccessEnumeratedExternalTenants object.'
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.conditionalAccessAllExternalTenants': '#/components/schemas/microsoft.graph.conditionalAccessAllExternalTenants'
          '#microsoft.graph.conditionalAccessEnumeratedExternalTenants': '#/components/schemas/microsoft.graph.conditionalAccessEnumeratedExternalTenants'
    microsoft.graph.applicationEnforcedRestrictionsSessionControl:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControl'
      - title: applicationEnforcedRestrictionsSessionControl
        required:
        - '@odata.type'
        type: object
        properties:
          '@odata.type':
            type: string
            default: '#microsoft.graph.applicationEnforcedRestrictionsSessionControl'
      x-ms-discriminator-value: '#microsoft.graph.applicationEnforcedRestrictionsSessionControl'
    microsoft.graph.authenticationCombinationConfigurationCollectionResponse:
      title: Collection of authenticationCombinationConfiguration
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
    microsoft.graph.filterMode:
      title: filterMode
      enum:
      - include
      - exclude
      type: string
    microsoft.graph.persistentBrowserSessionControl:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.conditionalAccessSessionControl'
      - title: persistentBrowserSessionControl
        required:
        - '@odata.type'
        type: object
        properties:
          mode:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.persistentBrowserSessionMode'
            - type: object
              nullable: true
            description: 'The possible values are: always, never.'
          '@odata.type':
            type: string
            default: '#microsoft.graph.persistentBrowserSessionControl'
      x-ms-discriminator-value: '#microsoft.graph.persistentBrowserSessionControl'
    microsoft.graph.ODataErrors.InnerError:
      title: InnerError
      required:
      - '@odata.type'
      type: object
      properties:
        request-id:
          type: string
          description: Request Id as tracked internally by the service
          nullable: true
        client-request-id:
          type: string
          description: Client request Id as sent by the client application.
          nullable: true
        date:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date when the error occured.
          format: date-time
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessClientApplications:
      title: conditionalAccessClientApplications
      required:
      - '@odata.type'
      type: object
      properties:
        excludeServicePrincipals:
          type: array
          items:
            type: string
          description: Service principal IDs excluded from the policy scope.
        includeServicePrincipals:
          type: array
          items:
            type: string
          description: Service principal IDs included in the policy scope, or ServicePrincipalsInMyTenant.
        servicePrincipalFilter:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.conditionalAccessFilter'
          - type: object
            nullable: true
          description: Filter that defines the dynamic-servicePrincipal-syntax rule to include/exclude service principals. A filter can use custom security attributes to include/exclude service principals.
        '@odata.type':
          type: string
    microsoft.graph.conditionalAccessSessionControl:
      title: conditionalAccessSessionControl
      required:
      - '@odata.type'
      type: object
      properties:
        isEnabled:
          type: boolean
          description: Specifies whether the session control is enabled.
          nullable: true
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.applicationEnforcedRestrictionsSessionControl': '#/components/schemas/microsoft.graph.applicationEnforcedRestrictionsSessionControl'
          '#microsoft.graph.cloudAppSecuritySessionControl': '#/components/schemas/microsoft.graph.cloudAppSecuritySessionControl'
          '#microsoft.graph.persistentBrowserSessionControl': '#/components/schemas/microsoft.graph.persistentBrowserSessionControl'
          '#microsoft.graph.secureSignInSessionControl': '#/components/schemas/microsoft.graph.secureSignInSessionControl'
          '#microsoft.graph.signInFrequencySessionControl': '#/components/schemas/microsoft.graph.signInFrequencySessionControl'
    microsoft.graph.authenticationCombinationConfiguration:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: authenticationCombinationConfiguration
        required:
        - '@odata.type'
        type: object
        properties:
          appliesToCombinations:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.authenticationMethodModes'
            description: Which authentication method combinations this configuration applies to. Must be an allowedCombinations object, part of the authenticationStrengthPolicy. The only possible value for fido2combinationConfigurations is 'fido2'.
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.fido2CombinationConfiguration': '#/components/schemas/microsoft.graph.fido2CombinationConfiguration'
            '#microsoft.graph.x509CertificateCombinationConfiguration': '#/components/schemas/microsoft.graph.x509CertificateCombinationConfiguration'
    microsoft.graph.conditionalAccessInsiderRiskLevels:
      title: conditionalAccessInsiderRiskLevels
      enum:
      - minor
      - moderate
      - elevated
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.signInFrequencyInterval:
      title: signInFrequencyInterval
      enum:
      - timeBased
      - everyTime
      - unknownFutureValue
      type: string
    microsoft.graph.authenticationStrengthPolicyCollectionResponse:
      title: Collection of authenticationStrengthPolicy
      type: object
      all

# --- truncated at 32 KB (178 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-policies-authenticationstrengthpolicy-api-openapi.yml