{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-update-allowed-combinations-result-schema.json",
  "title": "updateAllowedCombinationsResult",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/azure-ad-identity-conditionalaccessroot-api-openapi.yml#/components/schemas/microsoft.graph.updateAllowedCombinationsResult",
  "type": "object",
  "properties": {
    "additionalInformation": {
      "type": [
        "string",
        "null"
      ],
      "description": "Information about why the updateAllowedCombinations action was successful or failed."
    },
    "conditionalAccessReferences": {
      "type": "array",
      "items": {
        "type": [
          "string",
          "null"
        ]
      },
      "description": "References to existing Conditional Access policies that use this authentication strength."
    },
    "currentCombinations": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/microsoft.graph.authenticationMethodModes"
      },
      "description": "The list of current authentication method combinations allowed by the authentication strength."
    },
    "previousCombinations": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/microsoft.graph.authenticationMethodModes"
      },
      "description": "The list of former authentication method combinations allowed by the authentication strength before they were updated through the updateAllowedCombinations action."
    }
  },
  "additionalProperties": {
    "type": "object"
  },
  "$defs": {
    "microsoft.graph.authenticationMethodModes": {
      "title": "authenticationMethodModes",
      "enum": [
        "password",
        "voice",
        "hardwareOath",
        "softwareOath",
        "sms",
        "fido2",
        "windowsHelloForBusiness",
        "microsoftAuthenticatorPush",
        "deviceBasedPush",
        "temporaryAccessPassOneTime",
        "temporaryAccessPassMultiUse",
        "email",
        "x509CertificateSingleFactor",
        "x509CertificateMultiFactor",
        "federatedSingleFactor",
        "federatedMultiFactor",
        "unknownFutureValue",
        "qrCodePin"
      ],
      "type": "string",
      "x-ms-enum-flags": {
        "isFlags": true
      }
    }
  }
}