token_issuance_policies

Creates, updates, deletes, gets or lists a token_issuance_policies resource.

Overview

Name	token_issuance_policies
Type	Resource
Id	entra_id.policies.token_issuance_policies

Fields

The following fields are returned by SELECT queries:

get

Retrieved navigation property

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
appliesTo	array
definition	array	A string collection containing a JSON string that defines the rules and settings for a policy. The syntax for the definition differs for each derived policy type. Required.
deletedDateTime	string (date-time)	Date and time when this object was deleted. Always null when the object hasn't been deleted. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
description	string	Description for this policy. Required.
displayName	string	Display name for this policy. Required.
isOrganizationDefault	boolean	If set to true, activates this policy. There can be many policies for the same policy type, but only one can be activated as the organization default. Optional, default value is false.

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
appliesTo	array
definition	array	A string collection containing a JSON string that defines the rules and settings for a policy. The syntax for the definition differs for each derived policy type. Required.
deletedDateTime	string (date-time)	Date and time when this object was deleted. Always null when the object hasn't been deleted. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
description	string	Description for this policy. Required.
displayName	string	Display name for this policy. Required.
isOrganizationDefault	boolean	If set to true, activates this policy. There can be many policies for the same policy type, but only one can be activated as the organization default. Optional, default value is false.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	token_issuance_policy_id		The policy that specifies the characteristics of SAML tokens issued by Microsoft Entra ID.
list	select			Get a list of tokenIssuancePolicy objects.
insert	insert			Create a new tokenIssuancePolicy object.
update	update	token_issuance_policy_id		Update the properties of a tokenIssuancePolicy object.
delete	delete	token_issuance_policy_id	If-Match	Delete a tokenIssuancePolicy object.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
token_issuance_policy_id	string	The unique identifier of tokenIssuancePolicy
If-Match	string	ETag

SELECT examples

get

The policy that specifies the characteristics of SAML tokens issued by Microsoft Entra ID.

SELECT
id,
appliesTo,
definition,
deletedDateTime,
description,
displayName,
isOrganizationDefault
FROM entra_id.policies.token_issuance_policies
WHERE token_issuance_policy_id = '{{ token_issuance_policy_id }}' -- required
;

list

Get a list of tokenIssuancePolicy objects.

SELECT
id,
appliesTo,
definition,
deletedDateTime,
description,
displayName,
isOrganizationDefault
FROM entra_id.policies.token_issuance_policies
;

INSERT examples

insert

Create a new tokenIssuancePolicy object.

INSERT INTO entra_id.policies.token_issuance_policies (
id,
deletedDateTime,
description,
displayName,
definition,
isOrganizationDefault,
appliesTo
)
SELECT 
'{{ id }}',
'{{ deletedDateTime }}',
'{{ description }}',
'{{ displayName }}',
'{{ definition }}',
{{ isOrganizationDefault }},
'{{ appliesTo }}'
RETURNING
id,
appliesTo,
definition,
deletedDateTime,
description,
displayName,
isOrganizationDefault
;

Manifest

# Description fields are for documentation purposes
- name: token_issuance_policies
props:
  - name: id
    value: "{{ id }}"
    description: |
      The unique identifier for an entity. Read-only.
  - name: deletedDateTime
    value: "{{ deletedDateTime }}"
    description: |
      Date and time when this object was deleted. Always null when the object hasn't been deleted.
  - name: description
    value: "{{ description }}"
    description: |
      Description for this policy. Required.
  - name: displayName
    value: "{{ displayName }}"
    description: |
      Display name for this policy. Required.
  - name: definition
    value:
      - "{{ definition }}"
    description: |
      A string collection containing a JSON string that defines the rules and settings for a policy. The syntax for the definition differs for each derived policy type. Required.
  - name: isOrganizationDefault
    value: {{ isOrganizationDefault }}
    description: |
      If set to true, activates this policy. There can be many policies for the same policy type, but only one can be activated as the organization default. Optional, default value is false.
  - name: appliesTo
    value:
      - id: "{{ id }}"
        deletedDateTime: "{{ deletedDateTime }}"

UPDATE examples

update

Update the properties of a tokenIssuancePolicy object.

UPDATE entra_id.policies.token_issuance_policies
SET 
id = '{{ id }}',
deletedDateTime = '{{ deletedDateTime }}',
description = '{{ description }}',
displayName = '{{ displayName }}',
definition = '{{ definition }}',
isOrganizationDefault = {{ isOrganizationDefault }},
appliesTo = '{{ appliesTo }}'
WHERE 
token_issuance_policy_id = '{{ token_issuance_policy_id }}' --required
RETURNING
id,
appliesTo,
definition,
deletedDateTime,
description,
displayName,
isOrganizationDefault;

DELETE examples

delete

Delete a tokenIssuancePolicy object.

DELETE FROM entra_id.policies.token_issuance_policies
WHERE token_issuance_policy_id = '{{ token_issuance_policy_id }}' --required
AND If-Match = '{{ If-Match }}'
;