conditional_access_authentication_strength_policies_combination_configurations

Creates, updates, deletes, gets or lists a conditional_access_authentication_strength_policies_combination_configurations resource.

Overview

Name	conditional_access_authentication_strength_policies_combination_configurations
Type	Resource
Id	entra_id.identity.conditional_access_authentication_strength_policies_combination_configurations

Fields

The following fields are returned by SELECT queries:

get

Retrieved navigation property

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
appliesToCombinations	array	Which authentication method combinations this configuration applies to. Must be an allowedCombinations object, part of the authenticationStrengthPolicy. The only possible value for fido2combinationConfigurations is 'fido2'.

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
appliesToCombinations	array	Which authentication method combinations this configuration applies to. Must be an allowedCombinations object, part of the authenticationStrengthPolicy. The only possible value for fido2combinationConfigurations is 'fido2'.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	authentication_strength_policy_id, authentication_combination_configuration_id		Read the properties and relationships of an authenticationCombinationConfiguration object.
list	select	authentication_strength_policy_id		Get the authenticationCombinationConfiguration objects for an authentication strength policy. The objects can be of one or more of the following derived types: * fido2combinationConfigurations * x509certificatecombinationconfiguration authenticationCombinationConfiguration objects are supported only for custom authentication strengths.
insert	insert	authentication_strength_policy_id		Create a new authenticationCombinationConfiguration object which can be of one of the following derived types: * fido2combinationConfiguration * x509certificatecombinationconfiguration
update	update	authentication_strength_policy_id, authentication_combination_configuration_id		Update the properties of an authenticationCombinationConfiguration object. The properties can be for one of the following derived types: * fido2combinationConfigurations * x509certificatecombinationconfiguration
delete	delete	authentication_strength_policy_id, authentication_combination_configuration_id	If-Match	Delete an authenticationCombinationConfiguration for a custom authenticationStrengthPolicy object.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
authentication_combination_configuration_id	string	The unique identifier of authenticationCombinationConfiguration
authentication_strength_policy_id	string	The unique identifier of authenticationStrengthPolicy
If-Match	string	ETag

SELECT examples

get

Read the properties and relationships of an authenticationCombinationConfiguration object.

SELECT
id,
appliesToCombinations
FROM entra_id.identity.conditional_access_authentication_strength_policies_combination_configurations
WHERE authentication_strength_policy_id = '{{ authentication_strength_policy_id }}' -- required
AND authentication_combination_configuration_id = '{{ authentication_combination_configuration_id }}' -- required
;

list

Get the authenticationCombinationConfiguration objects for an authentication strength policy. The objects can be of one or more of the following derived types:
* fido2combinationConfigurations
* x509certificatecombinationconfiguration authenticationCombinationConfiguration objects are supported only for custom authentication strengths.

SELECT
id,
appliesToCombinations
FROM entra_id.identity.conditional_access_authentication_strength_policies_combination_configurations
WHERE authentication_strength_policy_id = '{{ authentication_strength_policy_id }}' -- required
;

INSERT examples

insert

Create a new authenticationCombinationConfiguration object which can be of one of the following derived types:
* fido2combinationConfiguration
* x509certificatecombinationconfiguration

INSERT INTO entra_id.identity.conditional_access_authentication_strength_policies_combination_configurations (
id,
appliesToCombinations,
authentication_strength_policy_id
)
SELECT 
'{{ id }}',
'{{ appliesToCombinations }}',
'{{ authentication_strength_policy_id }}'
RETURNING
id,
appliesToCombinations
;

Manifest

# Description fields are for documentation purposes
- name: conditional_access_authentication_strength_policies_combination_configurations
props:
  - name: authentication_strength_policy_id
    value: "{{ authentication_strength_policy_id }}"
    description: Required parameter for the conditional_access_authentication_strength_policies_combination_configurations resource.
  - name: id
    value: "{{ id }}"
    description: |
      The unique identifier for an entity. Read-only.
  - name: appliesToCombinations
    value:
      - "{{ appliesToCombinations }}"
    description: |
      Which authentication method combinations this configuration applies to. Must be an allowedCombinations object, part of the authenticationStrengthPolicy. The only possible value for fido2combinationConfigurations is 'fido2'.

UPDATE examples

update

Update the properties of an authenticationCombinationConfiguration object.
The properties can be for one of the following derived types:
* fido2combinationConfigurations
* x509certificatecombinationconfiguration

UPDATE entra_id.identity.conditional_access_authentication_strength_policies_combination_configurations
SET 
id = '{{ id }}',
appliesToCombinations = '{{ appliesToCombinations }}'
WHERE 
authentication_strength_policy_id = '{{ authentication_strength_policy_id }}' --required
AND authentication_combination_configuration_id = '{{ authentication_combination_configuration_id }}' --required
RETURNING
id,
appliesToCombinations;

DELETE examples

delete

Delete an authenticationCombinationConfiguration for a custom authenticationStrengthPolicy object.

DELETE FROM entra_id.identity.conditional_access_authentication_strength_policies_combination_configurations
WHERE authentication_strength_policy_id = '{{ authentication_strength_policy_id }}' --required
AND authentication_combination_configuration_id = '{{ authentication_combination_configuration_id }}' --required
AND If-Match = '{{ If-Match }}'
;