{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-identity-container-schema.json",
  "title": "microsoft.graph.identityContainer",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/azure-ad-identity-identitycontainer-api-openapi.yml#/components/schemas/microsoft.graph.identityContainer",
  "allOf": [
    {
      "$ref": "#/$defs/microsoft.graph.entity"
    },
    {
      "title": "identityContainer",
      "type": "object",
      "properties": {
        "apiConnectors": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.identityApiConnector"
          },
          "description": "Represents entry point for API connectors.",
          "x-ms-navigationProperty": true
        },
        "authenticationEventListeners": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.authenticationEventListener"
          },
          "description": "Represents listeners for custom authentication extension events in Azure AD for workforce and customers.",
          "x-ms-navigationProperty": true
        },
        "authenticationEventsFlows": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.authenticationEventsFlow"
          },
          "description": "Represents the entry point for self-service sign-up and sign-in user flows in both Microsoft Entra workforce and external tenants.",
          "x-ms-navigationProperty": true
        },
        "b2xUserFlows": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.b2xIdentityUserFlow"
          },
          "description": "Represents entry point for B2X/self-service sign-up identity userflows.",
          "x-ms-navigationProperty": true
        },
        "conditionalAccess": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessRoot"
        },
        "customAuthenticationExtensions": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.customAuthenticationExtension"
          },
          "description": "Represents custom extensions to authentication flows in Azure AD for workforce and customers.",
          "x-ms-navigationProperty": true
        },
        "identityProviders": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.identityProviderBase"
          },
          "x-ms-navigationProperty": true
        },
        "riskPrevention": {
          "$ref": "#/$defs/microsoft.graph.riskPreventionContainer"
        },
        "userFlowAttributes": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.identityUserFlowAttribute"
          },
          "description": "Represents entry point for identity userflow attributes.",
          "x-ms-navigationProperty": true
        },
        "verifiedId": {
          "$ref": "#/$defs/microsoft.graph.identityVerifiedIdRoot"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  ],
  "$defs": {
    "microsoft.graph.apiAuthenticationConfigurationBase": {
      "title": "apiAuthenticationConfigurationBase",
      "type": "object",
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.applicationEnforcedRestrictionsSessionControl": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControl"
        },
        {
          "title": "applicationEnforcedRestrictionsSessionControl",
          "type": "object",
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationCombinationConfiguration": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationCombinationConfiguration",
          "type": "object",
          "properties": {
            "appliesToCombinations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationMethodModes"
              },
              "description": "Which authentication method combinations this configuration applies to. Must be an allowedCombinations object, part of the authenticationStrengthPolicy. The only possible value for fido2combinationConfigurations is 'fido2'."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationConditionApplication": {
      "title": "authenticationConditionApplication",
      "type": "object",
      "properties": {
        "appId": {
          "type": "string",
          "description": "The identifier for an application corresponding to a condition which will trigger an authenticationEventListener."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.authenticationConditions": {
      "title": "authenticationConditions",
      "type": "object",
      "properties": {
        "applications": {
          "$ref": "#/$defs/microsoft.graph.authenticationConditionsApplications"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.authenticationConditionsApplications": {
      "title": "authenticationConditionsApplications",
      "type": "object",
      "properties": {
        "includeApplications": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.authenticationConditionApplication"
          },
          "x-ms-navigationProperty": true
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.authenticationContextClassReference": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationContextClassReference",
          "type": "object",
          "properties": {
            "description": {
              "type": [
                "string",
                "null"
              ],
              "description": "A short explanation of the policies that are enforced by authenticationContextClassReference. This value should be used to provide secondary text to describe the authentication context class reference when building user-facing admin experiences. For example, a selection UX."
            },
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name is the friendly name of the authenticationContextClassReference object. This value should be used to identify the authentication context class reference when building user-facing admin experiences. For example, a selection UX."
            },
            "isAvailable": {
              "type": [
                "boolean",
                "null"
              ],
              "description": "Indicates whether the authenticationContextClassReference has been published by the security admin and is ready for use by apps. When it's set to false, it shouldn't be shown in authentication context selection UX, or used to protect app resources. It's shown and available for Conditional Access policy authoring. The default value is false.  Supports $filter (eq)."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationEventListener": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationEventListener",
          "type": "object",
          "properties": {
            "authenticationEventsFlowId": {
              "type": [
                "string",
                "null"
              ],
              "description": "The identifier of the authenticationEventsFlow object."
            },
            "conditions": {
              "$ref": "#/$defs/microsoft.graph.authenticationConditions"
            },
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the listener."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationEventsFlow": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationEventsFlow",
          "type": "object",
          "properties": {
            "conditions": {
              "$ref": "#/$defs/microsoft.graph.authenticationConditions"
            },
            "description": {
              "type": [
                "string",
                "null"
              ],
              "description": "The description of the events policy."
            },
            "displayName": {
              "type": "string",
              "description": "Required. The display name for the events policy."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationMethodModeDetail": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationMethodModeDetail",
          "type": "object",
          "properties": {
            "authenticationMethod": {
              "$ref": "#/$defs/microsoft.graph.baseAuthenticationMethod"
            },
            "displayName": {
              "type": "string",
              "description": "The display name of this mode"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationMethodModes": {
      "title": "authenticationMethodModes",
      "enum": [
        "password",
        "voice",
        "hardwareOath",
        "softwareOath",
        "sms",
        "fido2",
        "windowsHelloForBusiness",
        "microsoftAuthenticatorPush",
        "deviceBasedPush",
        "temporaryAccessPassOneTime",
        "temporaryAccessPassMultiUse",
        "email",
        "x509CertificateSingleFactor",
        "x509CertificateMultiFactor",
        "federatedSingleFactor",
        "federatedMultiFactor",
        "unknownFutureValue",
        "qrCodePin"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    },
    "microsoft.graph.authenticationStrengthPolicy": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationStrengthPolicy",
          "type": "object",
          "properties": {
            "allowedCombinations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationMethodModes"
              },
              "description": "A collection of authentication method modes that are required be used to satify this authentication strength."
            },
            "createdDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": "string",
              "description": "The datetime when this policy was created.",
              "format": "date-time"
            },
            "description": {
              "type": [
                "string",
                "null"
              ],
              "description": "The human-readable description of this policy."
            },
            "displayName": {
              "type": "string",
              "description": "The human-readable display name of this policy. Supports $filter (eq, ne, not , and in)."
            },
            "modifiedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": "string",
              "description": "The datetime when this policy was last modified.",
              "format": "date-time"
            },
            "policyType": {
              "$ref": "#/$defs/microsoft.graph.authenticationStrengthPolicyType"
            },
            "requirementsSatisfied": {
              "$ref": "#/$defs/microsoft.graph.authenticationStrengthRequirements"
            },
            "combinationConfigurations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationCombinationConfiguration"
              },
              "description": "Settings that may be used to require specific types or instances of an authentication method to be used when authenticating with a specified combination of authentication methods.",
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.authenticationStrengthPolicyType": {
      "title": "authenticationStrengthPolicyType",
      "enum": [
        "builtIn",
        "custom",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.authenticationStrengthRequirements": {
      "title": "authenticationStrengthRequirements",
      "enum": [
        "none",
        "mfa",
        "unknownFutureValue"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    },
    "microsoft.graph.authenticationStrengthRoot": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "authenticationStrengthRoot",
          "type": "object",
          "properties": {
            "combinations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationMethodModes"
              }
            },
            "authenticationMethodModes": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationMethodModeDetail"
              },
              "description": "Names and descriptions of all valid authentication method modes in the system.",
              "x-ms-navigationProperty": true
            },
            "policies": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationStrengthPolicy"
              },
              "description": "A collection of authentication strength policies that exist for this tenant, including both built-in and custom policies.",
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.b2xIdentityUserFlow": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.identityUserFlow"
        },
        {
          "title": "b2xIdentityUserFlow",
          "type": "object",
          "properties": {
            "apiConnectorConfiguration": {
              "$ref": "#/$defs/microsoft.graph.userFlowApiConnectorConfiguration"
            },
            "identityProviders": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.identityProvider"
              },
              "description": "The identity providers included in the user flow.",
              "x-ms-navigationProperty": true
            },
            "languages": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.userFlowLanguageConfiguration"
              },
              "description": "The languages supported for customization within the user flow. Language customization is enabled by default in self-service sign-up user flow. You can't create custom languages in self-service sign-up user flows.",
              "x-ms-navigationProperty": true
            },
            "userAttributeAssignments": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.identityUserFlowAttributeAssignment"
              },
              "description": "The user attribute assignments included in the user flow.",
              "x-ms-navigationProperty": true
            },
            "userFlowIdentityProviders": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.identityProviderBase"
              },
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.baseAuthenticationMethod": {
      "title": "baseAuthenticationMethod",
      "enum": [
        "password",
        "voice",
        "hardwareOath",
        "softwareOath",
        "sms",
        "fido2",
        "windowsHelloForBusiness",
        "microsoftAuthenticator",
        "temporaryAccessPass",
        "email",
        "x509Certificate",
        "federation",
        "unknownFutureValue",
        "qrCodePin"
      ],
      "type": "string"
    },
    "microsoft.graph.caPoliciesDeletableRoot": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "caPoliciesDeletableRoot",
          "type": "object",
          "properties": {
            "namedLocations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.namedLocation"
              },
              "x-ms-navigationProperty": true
            },
            "policies": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.conditionalAccessPolicy"
              },
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.claimBinding": {
      "title": "claimBinding",
      "type": "object",
      "properties": {
        "matchConfidenceLevel": {
          "$ref": "#/$defs/microsoft.graph.matchConfidenceLevel"
        },
        "sourceAttribute": {
          "type": "string",
          "description": "Source attribute name from the source system, for example a directory attribute."
        },
        "verifiedIdClaim": {
          "type": "string",
          "description": "Verified ID claim name or path, for example vc.credentialSubject.firstName."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.claimBindingSource": {
      "title": "claimBindingSource",
      "enum": [
        "directory",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.claimValidation": {
      "title": "claimValidation",
      "type": "object",
      "properties": {
        "customExtensionId": {
          "type": "string",
          "description": "The identifier of a custom extension for claim validation."
        },
        "isEnabled": {
          "type": "boolean",
          "description": "Indicates whether claim validation is enabled."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.cloudAppSecuritySessionControl": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControl"
        },
        {
          "title": "cloudAppSecuritySessionControl",
          "type": "object",
          "properties": {
            "cloudAppSecurityType": {
              "$ref": "#/$defs/microsoft.graph.cloudAppSecuritySessionControlType"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.cloudAppSecuritySessionControlType": {
      "title": "cloudAppSecuritySessionControlType",
      "enum": [
        "mcasConfigured",
        "monitorOnly",
        "blockDownloads",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.conditionalAccessApplications": {
      "title": "conditionalAccessApplications",
      "type": "object",
      "properties": {
        "applicationFilter": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessFilter"
        },
        "excludeApplications": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Can be one of the following:  The list of client IDs (appId) explicitly excluded from the policy. Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite  MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals"
        },
        "includeApplications": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Can be one of the following:  The list of client IDs (appId) the policy applies to, unless explicitly excluded (in excludeApplications)  All  Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite  MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals"
        },
        "includeAuthenticationContextClassReferences": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "includeUserActions": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "User actions to include. Supported values are urn:user:registersecurityinfo and urn:user:registerdevice"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessAuthenticationFlows": {
      "title": "conditionalAccessAuthenticationFlows",
      "type": "object",
      "properties": {
        "transferMethods": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessTransferMethods"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessClientApp": {
      "title": "conditionalAccessClientApp",
      "enum": [
        "all",
        "browser",
        "mobileAppsAndDesktopClients",
        "exchangeActiveSync",
        "easSupported",
        "other",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.conditionalAccessClientApplications": {
      "title": "conditionalAccessClientApplications",
      "type": "object",
      "properties": {
        "excludeServicePrincipals": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Service principal IDs excluded from the policy scope."
        },
        "includeServicePrincipals": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Service principal IDs included in the policy scope, or ServicePrincipalsInMyTenant."
        },
        "servicePrincipalFilter": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessFilter"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessConditionSet": {
      "title": "conditionalAccessConditionSet",
      "type": "object",
      "properties": {
        "applications": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessApplications"
        },
        "authenticationFlows": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessAuthenticationFlows"
        },
        "clientApplications": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessClientApplications"
        },
        "clientAppTypes": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.conditionalAccessClientApp"
          },
          "description": "Client application types included in the policy. The possible values are: all, browser, mobileAppsAndDesktopClients, exchangeActiveSync, easSupported, other. Required.  The easUnsupported enumeration member will be deprecated in favor of exchangeActiveSync, which includes EAS supported and unsupported platforms."
        },
        "devices": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessDevices"
        },
        "insiderRiskLevels": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessInsiderRiskLevels"
        },
        "locations": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessLocations"
        },
        "platforms": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessPlatforms"
        },
        "servicePrincipalRiskLevels": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.riskLevel"
          },
          "description": "Service principal risk levels included in the policy. The possible values are: low, medium, high, none, unknownFutureValue."
        },
        "signInRiskLevels": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.riskLevel"
          },
          "description": "Sign-in risk levels included in the policy. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Required."
        },
        "userRiskLevels": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.riskLevel"
          },
          "description": "User risk levels included in the policy. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Required."
        },
        "users": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessUsers"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessDevicePlatform": {
      "title": "conditionalAccessDevicePlatform",
      "enum": [
        "android",
        "iOS",
        "windows",
        "windowsPhone",
        "macOS",
        "all",
        "unknownFutureValue",
        "linux"
      ],
      "type": "string"
    },
    "microsoft.graph.conditionalAccessDevices": {
      "title": "conditionalAccessDevices",
      "type": "object",
      "properties": {
        "deviceFilter": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessFilter"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessExternalTenants": {
      "title": "conditionalAccessExternalTenants",
      "type": "object",
      "properties": {
        "membershipKind": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessExternalTenantsMembershipKind"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessExternalTenantsMembershipKind": {
      "title": "conditionalAccessExternalTenantsMembershipKind",
      "enum": [
        "all",
        "enumerated",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.conditionalAccessFilter": {
      "title": "conditionalAccessFilter",
      "type": "object",
      "properties": {
        "mode": {
          "$ref": "#/$defs/microsoft.graph.filterMode"
        },
        "rule": {
          "type": "string",
          "description": "Rule syntax is similar to that used for membership rules for groups in Microsoft Entra ID. For details, see rules with multiple expressions"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessGrantControl": {
      "title": "conditionalAccessGrantControl",
      "enum": [
        "block",
        "mfa",
        "compliantDevice",
        "domainJoinedDevice",
        "approvedApplication",
        "compliantApplication",
        "passwordChange",
        "unknownFutureValue",
        "riskRemediation"
      ],
      "type": "string"
    },
    "microsoft.graph.conditionalAccessGrantControls": {
      "title": "conditionalAccessGrantControls",
      "type": "object",
      "properties": {
        "builtInControls": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.conditionalAccessGrantControl"
          },
          "description": "List of values of built-in controls required by the policy. Possible values: block, mfa, compliantDevice, domainJoinedDevice, approvedApplication, compliantApplication, passwordChange, unknownFutureValue, riskRemediation.  Use the Prefer: include-unknown-enum-members request header to get the following value in this evolvable enum: riskRemediation."
        },
        "customAuthenticationFactors": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "List of custom controls IDs required by the policy. For more information, see Custom controls."
        },
        "operator": {
          "type": [
            "string",
            "null"
          ],
          "description": "Defines the relationship of the grant controls. Possible values: AND, OR."
        },
        "termsOfUse": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "List of terms of use IDs required by the policy."
        },
        "authenticationStrength": {
          "$ref": "#/$defs/microsoft.graph.authenticationStrengthPolicy"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessGuestOrExternalUserTypes": {
      "title": "conditionalAccessGuestOrExternalUserTypes",
      "enum": [
        "none",
        "internalGuest",
        "b2bCollaborationGuest",
        "b2bCollaborationMember",
        "b2bDirectConnectUser",
        "otherExternalUser",
        "serviceProvider",
        "unknownFutureValue"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    },
    "microsoft.graph.conditionalAccessGuestsOrExternalUsers": {
      "title": "conditionalAccessGuestsOrExternalUsers",
      "type": "object",
      "properties": {
        "externalTenants": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessExternalTenants"
        },
        "guestOrExternalUserTypes": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessGuestOrExternalUserTypes"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessInsiderRiskLevels": {
      "title": "conditionalAccessInsiderRiskLevels",
      "enum": [
        "minor",
        "moderate",
        "elevated",
        "unknownFutureValue"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    },
    "microsoft.graph.conditionalAccessLocations": {
      "title": "conditionalAccessLocations",
      "type": "object",
      "properties": {
        "excludeLocations": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Location IDs excluded from scope of policy."
        },
        "includeLocations": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Location IDs in scope of policy unless explicitly excluded, All, or AllTrusted."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessPlatforms": {
      "title": "conditionalAccessPlatforms",
      "type": "object",
      "properties": {
        "excludePlatforms": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.conditionalAccessDevicePlatform"
          },
          "description": "The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue."
        },
        "includePlatforms": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.conditionalAccessDevicePlatform"
          },
          "description": "The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessPolicy": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.policyDeletableItem"
        },
        {
          "title": "conditionalAccessPolicy",
          "type": "object",
          "properties": {
            "conditions": {
              "$ref": "#/$defs/microsoft.graph.conditionalAccessConditionSet"
            },
            "createdDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
              "format": "date-time"
            },
            "description": {
              "type": [
                "string",
                "null"
              ]
            },
            "displayName": {
              "type": "string",
              "description": "Specifies a display name for the conditionalAccessPolicy object."
            },
            "grantControls": {
              "$ref": "#/$defs/microsoft.graph.conditionalAccessGrantControls"
            },
            "id": {
              "type": "string",
              "description": "Specifies the identifier of a conditionalAccessPolicy object. Read-only."
            },
            "modifiedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
              "format": "date-time"
            },
            "sessionControls": {
              "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControls"
            },
            "state": {
              "$ref": "#/$defs/microsoft.graph.conditionalAccessPolicyState"
            },
            "templateId": {
              "type": [
                "string",
                "null"
              ],
              "description": "Specifies the unique identifier of a Conditional Access template. Inherited from entity."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.conditionalAccessPolicyDetail": {
      "title": "conditionalAccessPolicyDetail",
      "type": "object",
      "properties": {
        "conditions": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessConditionSet"
        },
        "grantControls": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessGrantControls"
        },
        "sessionControls": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControls"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessPolicyState": {
      "title": "conditionalAccessPolicyState",
      "enum": [
        "enabled",
        "disabled",
        "enabledForReportingButNotEnforced"
      ],
      "type": "string"
    },
    "microsoft.graph.conditionalAccessRoot": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "conditionalAccessRoot",
          "type": "object",
          "properties": {
            "authenticationContextClassReferences": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.authenticationContextClassReference"
              },
              "description": "Read-only. Nullable. Returns a collection of the specified authentication context class references.",
              "x-ms-navigationProperty": true
            },
            "authenticationStrength": {
              "$ref": "#/$defs/microsoft.graph.authenticationStrengthRoot"
            },
            "deletedItems": {
              "$ref": "#/$defs/microsoft.graph.caPoliciesDeletableRoot"
            },
            "namedLocations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.namedLocation"
              },
              "description": "Read-only. Nullable. Returns a collection of the specified named locations.",
              "x-ms-navigationProperty": true
            },
            "policies": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.conditionalAccessPolicy"
              },
              "description": "Read-only. Nullable. Returns a collection of the specified Conditional Access (CA) policies.",
              "x-ms-navigationProperty": true
            },
            "templates": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.conditionalAccessTemplate"
              },
              "description": "Read-only. Nullable. Returns a collection of the specified Conditional Access templates.",
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.conditionalAccessSessionControl": {
      "title": "conditionalAccessSessionControl",
      "type": "object",
      "properties": {
        "isEnabled": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "Specifies whether the session control is enabled."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessSessionControls": {
      "title": "conditionalAccessSessionControls",
      "type": "object",
      "properties": {
        "applicationEnforcedRestrictions": {
          "$ref": "#/$defs/microsoft.graph.applicationEnforcedRestrictionsSessionControl"
        },
        "cloudAppSecurity": {
          "$ref": "#/$defs/microsoft.graph.cloudAppSecuritySessionControl"
        },
        "disableResilienceDefaults": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "Session control that determines whether it is acceptable for Microsoft Entra ID to extend existing sessions based on information collected prior to an outage or not."
        },
        "persistentBrowser": {
          "$ref": "#/$defs/microsoft.graph.persistentBrowserSessionControl"
        },
        "secureSignInSession": {
          "$ref": "#/$defs/microsoft.graph.secureSignInSessionControl"
        },
        "signInFrequency": {
          "$ref": "#/$defs/microsoft.graph.signInFrequencySessionControl"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.conditionalAccessTemplate": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "conditionalAccessTemplate",
          "type": "object",
          "properties": {
            "description": {
              "type": "string",
              "description": "The user-friendly name of the template."
            },
            "details": {
              "$ref": "#/$defs/microsoft.graph.conditionalAccessPolicyDetail"
            },
            "name": {
              "type": "string",
              "description": "The user-friendly name of the template."
            },
            "scenarios": {
              "$ref": "#/$defs/microsoft.graph.templateScenarios"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.conditionalAccessTransferMethods": {
      "title": "conditionalAccessTransferMethods",
      "enum": [
        "none",
        "deviceCodeFlow",
        "authenticationTransfer",
        "unknownFutureValue"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    },
    "microsoft.graph.conditionalAccessUsers": {
      "title": "conditionalAccessUsers",
      "type": "object",
      "properties": {
        "excludeGroups": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Group IDs excluded from scope of policy."
        },
        "excludeGuestsOrExternalUsers": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessGuestsOrExternalUsers"
        },
        "excludeRoles": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Role IDs excluded from scope of policy."
        },
        "excludeUsers": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "User IDs excluded from scope of policy and/or GuestsOrExternalUsers."
        },
        "includeGroups": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Group IDs in scope of policy unless explicitly excluded."
        },
        "includeGuestsOrExternalUsers": {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessGuestsOrExternalUsers"
        },
        "includeRoles": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Role IDs in scope of policy unless explicitly excluded."
        },
        "includeUsers": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "User IDs in scope of policy unless explicitly excluded, None, All, or GuestsOrExternalUsers."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.customAuthenticationExtension": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.customCalloutExtension"
        },
        {
          "title": "customAuthenticationExtension",
          "type": "object",
          "properties": {
            "behaviorOnError": {
              "$ref": "#/$defs/microsoft.graph.customExtensionBehaviorOnError"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.customCalloutExtension": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "customCalloutExtension",
          "type": "object",
          "properties": {
            "authenticationConfiguration": {
              "$ref": "#/$defs/microsoft.graph.customExtensionAuthenticationConfiguration"
            },
            "clientConfiguration": {
              "$ref": "#/$defs/microsoft.graph.customExtensionClientConfiguration"
            },
            "description": {
              "type": [
                "string",
                "null"
              ],
              "description": "Description for the customCalloutExtension object."
            },
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "Display name for the customCalloutExtension object."
            },
            "endpointConfiguration": {
              "$ref": "#/$defs/microsoft.graph.customExtensionEndpointConfiguration"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.customExtensionAuthenticationConfiguration": {
      "title": "customExtensionAuthenticationConfiguration",
      "type": "object",
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.customExtensionBehaviorOnError": {
      "title": "customExtensionBehaviorOnError",
      "type": "object",
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.customExtensionClientConfiguration": {
      "title": "customExtensionClientConfiguration",
      "type": "object",
      "properties": {
        "maximumRetries": {
          "maximum": 2147483647,
          "minimum": -2147483648,
          "type": [
            "number",
            "null"
          ],
          "description": "The max number of retries that Microsoft Entra ID makes to the external API. Values of 0 or 1 are supported. If null, the default for the service applies.",
          "format": "int32"
        },
        "timeoutInMilliseconds": {
          "maximum": 2147483647,
          "minimum": -2147483648,
          "type": [
            "number",
            "null"
          ],
          "description": "The max duration in milliseconds that Microsoft Entra ID waits for a response from the external app before it shuts down the connection. The valid range is between 200 and 2000 milliseconds. Default duration is 1000.",
          "format": "int32"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.customExtensionEndpointConfiguration": {
      "title": "customExtensionEndpointConfiguration",
      "type": "object",
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.entity": {
      "title": "entity",
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The unique identifier for an entity. Read-only."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.faceCheckConfiguration": {
      "title": "faceCheckConfiguration",
      "type": "object",
      "properties": {
        "isEnabled": {
          "type": "boolean",
          "description": "Defines if Face Check is required. Currently must always be true."
        },
        "sourcePhotoClaimName": {
          "type": "string",
          "description": "Source of photo to validate Face Check against. Currently must always be portrait."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.filterMode": {
      "title": "filterMode",
      "enum": [
        "include",
        "exclude"
      ],
      "type": "string"
    },
    "microsoft.graph.fraudProtectionProvider": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "fraudProtectionProvider",
          "type": "object",
          "properties": {
            "displayName": {
              "type": "string",
              "description": "The display name of the fraud protection provider configuration."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.genericError": {
      "title": "genericError",
      "type": "object",
      "properties": {
        "code": {
          "type": [
            "string",
            "null"
          ],
          "description": "The error code."
        },
        "message": {
          "type": [
            "string",
            "null"
          ],
          "description": "The error message."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.identityApiConnector": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityApiConnector",
          "type": "object",
          "properties": {
            "authenticationConfiguration": {
              "$ref": "#/$defs/microsoft.graph.apiAuthenticationConfigurationBase"
            },
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The name of the API connector."
            },
            "targetUrl": {
              "type": [
                "string",
                "null"
              ],
              "description": "The URL of the API endpoint to call."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.identityProvider": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityProvider",
          "type": "object",
          "properties": {
            "clientId": {
              "type": [
                "string",
                "null"
              ],
              "description": "The client ID for the application. This is the client ID obtained when registering the application with the identity provider. Required. Not nullable."
            },
            "clientSecret": {
              "type": [
                "string",
                "null"
              ],
              "description": "The client secret for the application. This is the client secret obtained when registering the application with the identity provider. This is write-only. A read operation will return .  Required. Not nullable."
            },
            "name": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the identity provider. Not nullable."
            },
            "type": {
              "type": [
                "string",
                "null"
              ],
              "description": "The identity provider type is a required field. For B2B scenario: Google, Facebook. For B2C scenario: Microsoft, Google, Amazon, LinkedIn, Facebook, GitHub, Twitter, Weibo, QQ, WeChat, OpenIDConnect. Not nullable."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.identityProviderBase": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityProviderBase",
          "type": "object",
          "properties": {
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the identity provider."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.identityUserFlow": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityUserFlow",
          "type": "object",
          "properties": {
            "userFlowType": {
              "$ref": "#/$defs/microsoft.graph.userFlowType"
            },
            "userFlowTypeVersion": {
              "type": [
                "number",
                "null"
              ],
              "format": "float"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.identityUserFlowAttribute": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityUserFlowAttribute",
          "type": "object",
          "properties": {
            "dataType": {
              "$ref": "#/$defs/microsoft.graph.identityUserFlowAttributeDataType"
            },
            "description": {
              "type": [
                "string",
                "null"
              ],
              "description": "The description of the user flow attribute that's shown to the user at the time of sign up."
            },
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the user flow attribute.  Supports $filter (eq, ne)."
            },
            "userFlowAttributeType": {
              "$ref": "#/$defs/microsoft.graph.identityUserFlowAttributeType"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.identityUserFlowAttributeAssignment": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityUserFlowAttributeAssignment",
          "type": "object",
          "properties": {
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the identityUserFlowAttribute within a user flow."
            },
            "isOptional": {
              "type": "boolean",
              "description": "Determines whether the identityUserFlowAttribute is optional. true means the user doesn't have to provide a value. false means the user can't complete sign-up without providing a value."
            },
            "requiresVerification": {
              "type": "boolean",
              "description": "Determines whether the identityUserFlowAttribute requires verification, and is only used for verifying the user's phone number or email address."
            },
            "userAttributeValues": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.userAttributeValuesItem"
              },
              "description": "The input options for the user flow attribute. Only applicable when the userInputType is radioSingleSelect, dropdownSingleSelect, or checkboxMultiSelect."
            },
            "userInputType": {
              "$ref": "#/$defs/microsoft.graph.identityUserFlowAttributeInputType"
            },
            "userAttribute": {
              "$ref": "#/$defs/microsoft.graph.identityUserFlowAttribute"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.identityUserFlowAttributeDataType": {
      "title": "identityUserFlowAttributeDataType",
      "enum": [
        "string",
        "boolean",
        "int64",
        "stringCollection",
        "dateTime",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.identityUserFlowAttributeInputType": {
      "title": "identityUserFlowAttributeInputType",
      "enum": [
        "textBox",
        "dateTimeDropdown",
        "radioSingleSelect",
        "dropdownSingleSelect",
        "emailBox",
        "checkboxMultiSelect"
      ],
      "type": "string"
    },
    "microsoft.graph.identityUserFlowAttributeType": {
      "title": "identityUserFlowAttributeType",
      "enum": [
        "builtIn",
        "custom",
        "required",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.identityVerifiedIdRoot": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "identityVerifiedIdRoot",
          "type": "object",
          "properties": {
            "profiles": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.verifiedIdProfile"
              },
              "description": "Profile containing properties about a Verified ID provider and purpose",
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.matchConfidenceLevel": {
      "title": "matchConfidenceLevel",
      "enum": [
        "exact",
        "relaxed",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.namedLocation": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.policyDeletableItem"
        },
        {
          "title": "namedLocation",
          "type": "object",
          "properties": {
            "createdDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The Timestamp type represents creation date and time of the location using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
              "format": "date-time"
            },
            "displayName": {
              "type": "string",
              "description": "Human-readable name of the location."
            },
            "id": {
              "type": "string",
              "description": "Identifier of a namedLocation object. Read-only."
            },
            "modifiedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The Timestamp type represents last modified date and time of the location using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
              "format": "date-time"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.persistentBrowserSessionControl": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControl"
        },
        {
          "title": "persistentBrowserSessionControl",
          "type": "object",
          "properties": {
            "mode": {
              "$ref": "#/$defs/microsoft.graph.persistentBrowserSessionMode"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.persistentBrowserSessionMode": {
      "title": "persistentBrowserSessionMode",
      "enum": [
        "always",
        "never"
      ],
      "type": "string"
    },
    "microsoft.graph.policyDeletableItem": {
      "title": "policyDeletableItem",
      "type": "object",
      "properties": {
        "deletedDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": [
            "string",
            "null"
          ],
          "format": "date-time"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.riskLevel": {
      "title": "riskLevel",
      "enum": [
        "low",
        "medium",
        "high",
        "hidden",
        "none",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.riskPreventionContainer": {
      "title": "riskPreventionContainer",
      "type": "object",
      "properties": {
        "fraudProtectionProviders": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.fraudProtectionProvider"
          },
          "description": "Represents entry point for fraud protection provider configurations for Microsoft Entra External ID tenants.",
          "x-ms-navigationProperty": true
        },
        "webApplicationFirewallProviders": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.webApplicationFirewallProvider"
          },
          "description": "Collection of WAF provider configurations registered in the External ID tenant.",
          "x-ms-navigationProperty": true
        },
        "webApplicationFirewallVerifications": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.webApplicationFirewallVerificationModel"
          },
          "description": "Collection of verification operations performed for domains or hosts with WAF providers registered in the External ID tenant.",
          "x-ms-navigationProperty": true
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.secureSignInSessionControl": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControl"
        },
        {
          "title": "secureSignInSessionControl",
          "type": "object",
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.signInFrequencyAuthenticationType": {
      "title": "signInFrequencyAuthenticationType",
      "enum": [
        "primaryAndSecondaryAuthentication",
        "secondaryAuthentication",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.signInFrequencyInterval": {
      "title": "signInFrequencyInterval",
      "enum": [
        "timeBased",
        "everyTime",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.signInFrequencySessionControl": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.conditionalAccessSessionControl"
        },
        {
          "title": "signInFrequencySessionControl",
          "type": "object",
          "properties": {
            "authenticationType": {
              "$ref": "#/$defs/microsoft.graph.signInFrequencyAuthenticationType"
            },
            "frequencyInterval": {
              "$ref": "#/$defs/microsoft.graph.signInFrequencyInterval"
            },
            "type": {
              "$ref": "#/$defs/microsoft.graph.signinFrequencyType"
            },
            "value": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": [
                "number",
                "null"
              ],
              "description": "The number of days or hours.",
              "format": "int32"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.signinFrequencyType": {
      "title": "signinFrequencyType",
      "enum": [
        "days",
        "hours"
      ],
      "type": "string"
    },
    "microsoft.graph.templateScenarios": {
      "title": "templateScenarios",
      "enum": [
        "new",
        "secureFoundation",
        "zeroTrust",
        "remoteWork",
        "protectAdmins",
        "emergingThreats",
        "unknownFutureValue"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    },
    "microsoft.graph.userAttributeValuesItem": {
      "title": "userAttributeValuesItem",
      "type": "object",
      "properties": {
        "isDefault": {
          "type": "boolean",
          "description": "Determines whether the value is set as the default."
        },
        "name": {
          "type": [
            "string",
            "null"
          ],
          "description": "The display name of the property displayed to the user in the user flow."
        },
        "value": {
          "type": [
            "string",
            "null"
          ],
          "description": "The value that is set when this item is selected."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.userFlowApiConnectorConfiguration": {
      "title": "userFlowApiConnectorConfiguration",
      "type": "object",
      "properties": {
        "postAttributeCollection": {
          "$ref": "#/$defs/microsoft.graph.identityApiConnector"
        },
        "postFederationSignup": {
          "$ref": "#/$defs/microsoft.graph.identityApiConnector"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.userFlowLanguageConfiguration": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "userFlowLanguageConfiguration",
          "type": "object",
          "properties": {
            "displayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The language name to display. This property is read-only."
            },
            "isEnabled": {
              "type": "boolean",
              "description": "Indicates whether the language is enabled within the user flow."
            },
            "defaultPages": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.userFlowLanguagePage"
              },
              "description": "Collection of pages with the default content to display in a user flow for a specified language. This collection doesn't allow any kind of modification.",
              "x-ms-navigationProperty": true
            },
            "overridesPages": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.userFlowLanguagePage"
              },
              "description": "Collection of pages with the overrides messages to display in a user flow for a specified language. This collection only allows you to modify the content of the page, any other modification isn't allowed (creation or deletion of pages).",
              "x-ms-navigationProperty": true
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.userFlowLanguagePage": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "userFlowLanguagePage",
          "type": "object",
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.userFlowType": {
      "title": "userFlowType",
      "enum": [
        "signUp",
        "signIn",
        "signUpOrSignIn",
        "passwordReset",
        "profileUpdate",
        "resourceOwner",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.verifiedIdProfile": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "verifiedIdProfile",
          "type": "object",
          "properties": {
            "description": {
              "type": "string",
              "description": "Description for the verified ID profile. Required."
            },
            "faceCheckConfiguration": {
              "$ref": "#/$defs/microsoft.graph.faceCheckConfiguration"
            },
            "lastModifiedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "DateTime the profile was last modified. Optional.",
              "format": "date-time"
            },
            "name": {
              "type": "string",
              "description": "Display name for the verified ID profile. Required."
            },
            "priority": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": [
                "number",
                "null"
              ],
              "description": "Defines profile processing priority if multiple profiles are configured. Optional.",
              "format": "int32"
            },
            "state": {
              "$ref": "#/$defs/microsoft.graph.verifiedIdProfileState"
            },
            "verifiedIdProfileConfiguration": {
              "$ref": "#/$defs/microsoft.graph.verifiedIdProfileConfiguration"
            },
            "verifiedIdUsageConfigurations": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.verifiedIdUsageConfiguration"
              },
              "description": "Collection defining the usage purpose for the profile. Required."
            },
            "verifierDid": {
              "type": "string",
              "description": "Decentralized Identifier (DID) string that represents the verifier in the verifiable credential exchange. Required."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.verifiedIdProfileConfiguration": {
      "title": "verifiedIdProfileConfiguration",
      "type": "object",
      "properties": {
        "acceptedIssuer": {
          "type": "string",
          "description": "Trusted Verified ID issuer."
        },
        "claimBindings": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.claimBinding"
          },
          "description": "Claim bindings from Verified ID to source attributes."
        },
        "claimBindingSource": {
          "$ref": "#/$defs/microsoft.graph.claimBindingSource"
        },
        "claimValidation": {
          "$ref": "#/$defs/microsoft.graph.claimValidation"
        },
        "type": {
          "type": "string",
          "description": "Verified ID type."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.verifiedIdProfileState": {
      "title": "verifiedIdProfileState",
      "enum": [
        "enabled",
        "disabled",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.verifiedIdUsageConfiguration": {
      "title": "verifiedIdUsageConfiguration",
      "type": "object",
      "properties": {
        "isEnabledForTestOnly": {
          "type": "boolean",
          "description": "Sets profile usage for evaluation (test-only) or production."
        },
        "purpose": {
          "$ref": "#/$defs/microsoft.graph.verifiedIdUsageConfigurationPurpose"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.verifiedIdUsageConfigurationPurpose": {
      "title": "verifiedIdUsageConfigurationPurpose",
      "enum": [
        "recovery",
        "onboarding",
        "all",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.webApplicationFirewallDnsConfiguration": {
      "title": "webApplicationFirewallDnsConfiguration",
      "type": "object",
      "properties": {
        "isDomainVerified": {
          "type": "boolean",
          "description": "Indicates whether the domain owning this DNS record has been verified by the WAF provider."
        },
        "isProxied": {
          "type": "boolean",
          "description": "Indicates whether traffic for this DNS record is proxied through the WAF provider's network (for example, using a CDN or reverse proxy)."
        },
        "name": {
          "type": [
            "string",
            "null"
          ],
          "description": "The DNS record name (for example, www.contoso.com or contoso.com). This is the host or zone name to which the configuration applies."
        },
        "recordType": {
          "$ref": "#/$defs/microsoft.graph.webApplicationFirewallDnsRecordType"
        },
        "value": {
          "type": [
            "string",
            "null"
          ],
          "description": "The value of the DNS record."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.webApplicationFirewallDnsRecordType": {
      "title": "webApplicationFirewallDnsRecordType",
      "enum": [
        "cname",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.webApplicationFirewallProvider": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "webApplicationFirewallProvider",
          "type": "object",
          "properties": {
            "displayName": {
              "type": "string",
              "description": "The display name of the WAF provider."
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.webApplicationFirewallProviderType": {
      "title": "webApplicationFirewallProviderType",
      "enum": [
        "akamai",
        "cloudflare",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.webApplicationFirewallVerificationModel": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "webApplicationFirewallVerificationModel",
          "type": "object",
          "properties": {
            "providerType": {
              "$ref": "#/$defs/microsoft.graph.webApplicationFirewallProviderType"
            },
            "verificationResult": {
              "$ref": "#/$defs/microsoft.graph.webApplicationFirewallVerificationResult"
            },
            "verifiedDetails": {
              "$ref": "#/$defs/microsoft.graph.webApplicationFirewallVerifiedDetails"
            },
            "verifiedHost": {
              "type": [
                "string",
                "null"
              ],
              "description": "The host (domain or subdomain) that was verified as part of this verification operation."
            },
            "provider": {
              "$ref": "#/$defs/microsoft.graph.webApplicationFirewallProvider"
            }
          },
          "additionalProperties": {
            "type": "object"
          }
        }
      ]
    },
    "microsoft.graph.webApplicationFirewallVerificationResult": {
      "title": "webApplicationFirewallVerificationResult",
      "type": "object",
      "properties": {
        "errors": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.genericError"
          },
          "description": "List of errors encountered during the verification process."
        },
        "status": {
          "$ref": "#/$defs/microsoft.graph.webApplicationFirewallVerificationStatus"
        },
        "verifiedOnDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "UTC timestamp when the verification was performed or last updated. This indicates when the verification result was produced.",
          "format": "date-time"
        },
        "warnings": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.genericError"
          },
          "description": "List of warnings produced during verification."
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    },
    "microsoft.graph.webApplicationFirewallVerificationStatus": {
      "title": "webApplicationFirewallVerificationStatus",
      "enum": [
        "success",
        "warning",
        "failure",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.webApplicationFirewallVerifiedDetails": {
      "title": "webApplicationFirewallVerifiedDetails",
      "type": "object",
      "properties": {
        "dnsConfiguration": {
          "$ref": "#/$defs/microsoft.graph.webApplicationFirewallDnsConfiguration"
        }
      },
      "additionalProperties": {
        "type": "object"
      }
    }
  }
}