{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-fido2-authentication-method-schema.json",
  "title": "microsoft.graph.fido2AuthenticationMethod",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/azure-ad-users-authentication-api-openapi.yml#/components/schemas/microsoft.graph.fido2AuthenticationMethod",
  "allOf": [
    {
      "$ref": "#/$defs/microsoft.graph.authenticationMethod"
    },
    {
      "title": "fido2AuthenticationMethod",
      "type": "object",
      "properties": {
        "aaGuid": {
          "type": [
            "string",
            "null"
          ],
          "description": "Authenticator Attestation GUID, an identifier that indicates the type (such as make and model) of the authenticator."
        },
        "attestationCertificates": {
          "type": "array",
          "items": {
            "type": [
              "string",
              "null"
            ]
          },
          "description": "The attestation certificate or certificates attached to this passkey."
        },
        "attestationLevel": {
          "$ref": "#/$defs/microsoft.graph.attestationLevel"
        },
        "displayName": {
          "type": [
            "string",
            "null"
          ],
          "description": "The display name of the key as given by the user."
        },
        "model": {
          "type": [
            "string",
            "null"
          ],
          "description": "The manufacturer-assigned model of the FIDO2 passkey."
        },
        "passkeyType": {
          "$ref": "#/$defs/microsoft.graph.passkeyType"
        },
        "publicKeyCredential": {
          "$ref": "#/$defs/microsoft.graph.webauthnPublicKeyCredential"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  ],
  "$defs": {
    "microsoft.graph.attestationLevel": {
      "title": "attestationLevel",
      "enum": [
        "attested",
        "notAttested",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.authenticationMethod": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationMethod",
          "type": "object",
          "properties": {
            "createdDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "Represents the date and time when an entity was created. Read-only.",
              "format": "date-time"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.entity": {
      "title": "entity",
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The unique identifier for an entity. Read-only."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.passkeyType": {
      "title": "passkeyType",
      "enum": [
        "deviceBound",
        "synced",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.webauthnAuthenticationExtensionsClientOutputs": {
      "title": "webauthnAuthenticationExtensionsClientOutputs",
      "type": "object",
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.webauthnAuthenticatorAttestationResponse": {
      "title": "webauthnAuthenticatorAttestationResponse",
      "type": "object",
      "properties": {
        "attestationObject": {
          "type": [
            "string",
            "null"
          ],
          "description": "A CBOR-encoded attestation object containing the authenticator data and attestation statement. This value is Base64URL-encoded without padding."
        },
        "clientDataJSON": {
          "type": [
            "string",
            "null"
          ],
          "description": "Contains the JSON-compatible serialization of client data passed to the authenticator by the client. This value is Base64URL-encoded without padding."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.webauthnPublicKeyCredential": {
      "title": "webauthnPublicKeyCredential",
      "type": "object",
      "properties": {
        "clientExtensionResults": {
          "$ref": "#/$defs/microsoft.graph.webauthnAuthenticationExtensionsClientOutputs"
        },
        "id": {
          "type": [
            "string",
            "null"
          ],
          "description": "The credential ID created by the WebAuthn Authenticator. This value is Base64URL-encoded without padding."
        },
        "response": {
          "$ref": "#/$defs/microsoft.graph.webauthnAuthenticatorAttestationResponse"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  }
}