Créer authenticationCombinationConfiguration

Espace de noms: microsoft.graph

Créez un objet authenticationCombinationConfiguration qui peut être de l’un des types dérivés suivants :

Cette API est disponible dans les déploiements de cloud national suivants.

Service global	Gouvernement des États-Unis L4	Us Government L5 (DOD)	Chine gérée par 21Vianet
✅	✅	✅	✅

Autorisations

Choisissez l’autorisation ou les autorisations marquées comme moins privilégiées pour cette API. Utilisez une autorisation ou des autorisations privilégiées plus élevées uniquement si votre application en a besoin. Pour plus d’informations sur les autorisations déléguées et d’application, consultez Types d’autorisations. Pour en savoir plus sur ces autorisations, consultez les informations de référence sur les autorisations.

Type d’autorisation	Autorisations avec privilèges minimum	Autorisations privilégiées plus élevées
Déléguée (compte professionnel ou scolaire)	Policy.ReadWrite.ConditionalAccess	Policy.ReadWrite.AuthenticationMethod
Déléguée (compte Microsoft personnel)	Non prise en charge.	Non prise en charge.
Application	Policy.ReadWrite.ConditionalAccess	Policy.ReadWrite.AuthenticationMethod

Importante

Dans les scénarios délégués avec des comptes professionnels ou scolaires, l’utilisateur connecté doit se voir attribuer un rôle Microsoft Entra pris en charge ou un rôle personnalisé avec une autorisation de rôle prise en charge. Les rôles les moins privilégiés suivants sont pris en charge pour cette opération.

Administrateur de l’accès conditionnel
Administrateur de sécurité

Requête HTTP

POST /identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicyId}/combinationConfigurations

En-têtes de demande

Nom	Description
Autorisation	Porteur {token}. Obligatoire. En savoir plus sur l’authentification et l’autorisation.
Content-Type	application/json. Obligatoire.

Corps de la demande

Dans le corps de la demande, fournissez une représentation JSON de l’objet authenticationCombinationConfiguration .

Vous pouvez spécifier les propriétés suivantes lors de la création d’une authenticationCombinationConfiguration. En outre, vous devez fournir les @odata.type propriétés et requises du type dérivé d’authenticationCombinationConfiguration que vous créez. Par exemple : "@odata.type" : "#microsoft.graph.fido2CombinationConfiguration".

Propriété	Type	Description
appliesToCombinations	collection authenticationMethodModes	Combinaisons où cette configuration s’applique. Pour fido2combinationConfigurations , utilisez `"fido2"`, pour x509certificatecombinationconfiguration , utilisez `"x509CertificateSingleFactor"` ou `"x509CertificateMultiFactor"`. Obligatoire.

Réponse

Si elle réussit, cette méthode renvoie un 201 Created code de réponse et un objet authenticationCombinationConfiguration qui peut être un objet fido2combinationConfigurations ou x509certificatecombinationconfiguration dans le corps de la réponse.

Exemples

Exemple 1 : Créer un objet fido2combinationConfiguration

Demande

L’exemple suivant illustre une demande.

POST https://graph.microsoft.com/v1.0/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicyId}//combinationConfigurations
Content-Type: application/json
Content-length: 130

{
  "@odata.type" : "#microsoft.graph.fido2CombinationConfiguration",
  "allowedAAGUIDs": [
    "486c3b50-889c-480a-abc5-c04ef7c873e0",
    "c042882f-a621-40c8-94d3-9cde3a826fed",
    "ec454c08-4c77-4012-9d48-45f7f0fccdfb"
  ],
  "appliesToCombinations": ["fido2"]
}


// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new Fido2CombinationConfiguration
{
	OdataType = "#microsoft.graph.fido2CombinationConfiguration",
	AllowedAAGUIDs = new List<string>
	{
		"486c3b50-889c-480a-abc5-c04ef7c873e0",
		"c042882f-a621-40c8-94d3-9cde3a826fed",
		"ec454c08-4c77-4012-9d48-45f7f0fccdfb",
	},
	AppliesToCombinations = new List<AuthenticationMethodModes?>
	{
		AuthenticationMethodModes.Fido2,
	},
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.ConditionalAccess.AuthenticationStrength.Policies["{authenticationStrengthPolicy-id}"].CombinationConfigurations.PostAsync(requestBody);



// Code snippets are only available for the latest major version. Current major version is $v1.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-sdk-go"
	  graphmodels "github.com/microsoftgraph/msgraph-sdk-go/models"
	  //other-imports
)

requestBody := graphmodels.NewAuthenticationCombinationConfiguration()
allowedAAGUIDs := []string {
	"486c3b50-889c-480a-abc5-c04ef7c873e0",
	"c042882f-a621-40c8-94d3-9cde3a826fed",
	"ec454c08-4c77-4012-9d48-45f7f0fccdfb",
}
requestBody.SetAllowedAAGUIDs(allowedAAGUIDs)
appliesToCombinations := []graphmodels.AuthenticationMethodModesable {
	authenticationMethodModes := graphmodels.FIDO2_AUTHENTICATIONMETHODMODES 
	requestBody.SetAuthenticationMethodModes(&authenticationMethodModes)
}
requestBody.SetAppliesToCombinations(appliesToCombinations)

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
combinationConfigurations, err := graphClient.Identity().ConditionalAccess().AuthenticationStrength().Policies().ByAuthenticationStrengthPolicyId("authenticationStrengthPolicy-id").CombinationConfigurations().Post(context.Background(), requestBody, nil)


// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

Fido2CombinationConfiguration authenticationCombinationConfiguration = new Fido2CombinationConfiguration();
authenticationCombinationConfiguration.setOdataType("#microsoft.graph.fido2CombinationConfiguration");
LinkedList<String> allowedAAGUIDs = new LinkedList<String>();
allowedAAGUIDs.add("486c3b50-889c-480a-abc5-c04ef7c873e0");
allowedAAGUIDs.add("c042882f-a621-40c8-94d3-9cde3a826fed");
allowedAAGUIDs.add("ec454c08-4c77-4012-9d48-45f7f0fccdfb");
authenticationCombinationConfiguration.setAllowedAAGUIDs(allowedAAGUIDs);
LinkedList<AuthenticationMethodModes> appliesToCombinations = new LinkedList<AuthenticationMethodModes>();
appliesToCombinations.add(AuthenticationMethodModes.Fido2);
authenticationCombinationConfiguration.setAppliesToCombinations(appliesToCombinations);
AuthenticationCombinationConfiguration result = graphClient.identity().conditionalAccess().authenticationStrength().policies().byAuthenticationStrengthPolicyId("{authenticationStrengthPolicy-id}").combinationConfigurations().post(authenticationCombinationConfiguration);


const options = {
	authProvider,
};

const client = Client.init(options);

const authenticationCombinationConfiguration = {
  '@odata.type': '#microsoft.graph.fido2CombinationConfiguration',
  allowedAAGUIDs: [
    '486c3b50-889c-480a-abc5-c04ef7c873e0',
    'c042882f-a621-40c8-94d3-9cde3a826fed',
    'ec454c08-4c77-4012-9d48-45f7f0fccdfb'
  ],
  appliesToCombinations: ['fido2']
};

await client.api('/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicyId}//combinationConfigurations')
	.post(authenticationCombinationConfiguration);


<?php
use Microsoft\Graph\GraphServiceClient;
use Microsoft\Graph\Generated\Models\Fido2CombinationConfiguration;
use Microsoft\Graph\Generated\Models\AuthenticationMethodModes;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);

$requestBody = new Fido2CombinationConfiguration();
$requestBody->setOdataType('#microsoft.graph.fido2CombinationConfiguration');
$requestBody->setAllowedAAGUIDs(['486c3b50-889c-480a-abc5-c04ef7c873e0', 'c042882f-a621-40c8-94d3-9cde3a826fed', 'ec454c08-4c77-4012-9d48-45f7f0fccdfb', 	]);
$requestBody->setAppliesToCombinations([new AuthenticationMethodModes('fido2'),	]);

$result = $graphServiceClient->identity()->conditionalAccess()->authenticationStrength()->policies()->byAuthenticationStrengthPolicyId('authenticationStrengthPolicy-id')->combinationConfigurations()->post($requestBody)->wait();


Import-Module Microsoft.Graph.Identity.SignIns

$params = @{
	"@odata.type" = "#microsoft.graph.fido2CombinationConfiguration"
	allowedAAGUIDs = @(
	"486c3b50-889c-480a-abc5-c04ef7c873e0"
"c042882f-a621-40c8-94d3-9cde3a826fed"
"ec454c08-4c77-4012-9d48-45f7f0fccdfb"
)
appliesToCombinations = @(
"fido2"
)
}

New-MgIdentityConditionalAccessAuthenticationStrengthPolicyCombinationConfiguration -AuthenticationStrengthPolicyId $authenticationStrengthPolicyId -BodyParameter $params


# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.fido2_combination_configuration import Fido2CombinationConfiguration
from msgraph.generated.models.authentication_method_modes import AuthenticationMethodModes
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = Fido2CombinationConfiguration(
	odata_type = "#microsoft.graph.fido2CombinationConfiguration",
	allowed_a_a_g_u_i_ds = [
		"486c3b50-889c-480a-abc5-c04ef7c873e0",
		"c042882f-a621-40c8-94d3-9cde3a826fed",
		"ec454c08-4c77-4012-9d48-45f7f0fccdfb",
	],
	applies_to_combinations = [
		AuthenticationMethodModes.Fido2,
	],
)

result = await graph_client.identity.conditional_access.authentication_strength.policies.by_authentication_strength_policy_id('authenticationStrengthPolicy-id').combination_configurations.post(request_body)

Réponse

L’exemple suivant illustre la réponse.

HTTP/1.1 201 Created
Content-Type: application/json

{
  "@odata.type" : "#microsoft.graph.fido2CombinationConfiguration",
  "id": "96cb1a17-e45e-4b4f-8b4b-4a9490d63d66",
  "allowedAAGUIDs": [
    "486c3b50-889c-480a-abc5-c04ef7c873e0",
    "c042882f-a621-40c8-94d3-9cde3a826fed",
    "ec454c08-4c77-4012-9d48-45f7f0fccdfb"
  ],
  "appliesToCombinations": ["fido2"]
}

Exemple 2 : Créer un objet x509CertificateCombinationConfiguration

Demande

L’exemple suivant illustre une demande.

POST https://graph.microsoft.com/v1.0/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicyId}/combinationConfigurations 
 
{ 
    "@odata.type": "#microsoft.graph.x509CertificateCombinationConfiguration", 
    "allowedIssuerSkis": [ 
        "9A4248C6AC8C2931AB2A86537818E92E7B6C97B6" 
    ], 
    "allowedPolicyOIDs": [], 
    "appliesToCombinations": [ 
        "x509CertificateSingleFactor " 
    ] 
}


// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new X509CertificateCombinationConfiguration
{
	OdataType = "#microsoft.graph.x509CertificateCombinationConfiguration",
	AllowedIssuerSkis = new List<string>
	{
		"9A4248C6AC8C2931AB2A86537818E92E7B6C97B6",
	},
	AllowedPolicyOIDs = new List<string>
	{
	},
	AppliesToCombinations = new List<AuthenticationMethodModes?>
	{
		AuthenticationMethodModes.X509CertificateSingleFactor,
	},
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.ConditionalAccess.AuthenticationStrength.Policies["{authenticationStrengthPolicy-id}"].CombinationConfigurations.PostAsync(requestBody);



// Code snippets are only available for the latest major version. Current major version is $v1.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-sdk-go"
	  graphmodels "github.com/microsoftgraph/msgraph-sdk-go/models"
	  //other-imports
)

requestBody := graphmodels.NewAuthenticationCombinationConfiguration()
allowedIssuerSkis := []string {
	"9A4248C6AC8C2931AB2A86537818E92E7B6C97B6",
}
requestBody.SetAllowedIssuerSkis(allowedIssuerSkis)
allowedPolicyOIDs := []string {

}
requestBody.SetAllowedPolicyOIDs(allowedPolicyOIDs)
appliesToCombinations := []graphmodels.AuthenticationMethodModesable {
	authenticationMethodModes := graphmodels.X509CERTIFICATESINGLEFACTOR _AUTHENTICATIONMETHODMODES 
	requestBody.SetAuthenticationMethodModes(&authenticationMethodModes)
}
requestBody.SetAppliesToCombinations(appliesToCombinations)

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
combinationConfigurations, err := graphClient.Identity().ConditionalAccess().AuthenticationStrength().Policies().ByAuthenticationStrengthPolicyId("authenticationStrengthPolicy-id").CombinationConfigurations().Post(context.Background(), requestBody, nil)


// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

X509CertificateCombinationConfiguration authenticationCombinationConfiguration = new X509CertificateCombinationConfiguration();
authenticationCombinationConfiguration.setOdataType("#microsoft.graph.x509CertificateCombinationConfiguration");
LinkedList<String> allowedIssuerSkis = new LinkedList<String>();
allowedIssuerSkis.add("9A4248C6AC8C2931AB2A86537818E92E7B6C97B6");
authenticationCombinationConfiguration.setAllowedIssuerSkis(allowedIssuerSkis);
LinkedList<String> allowedPolicyOIDs = new LinkedList<String>();
authenticationCombinationConfiguration.setAllowedPolicyOIDs(allowedPolicyOIDs);
LinkedList<AuthenticationMethodModes> appliesToCombinations = new LinkedList<AuthenticationMethodModes>();
appliesToCombinations.add(AuthenticationMethodModes.X509CertificateSingleFactor);
authenticationCombinationConfiguration.setAppliesToCombinations(appliesToCombinations);
AuthenticationCombinationConfiguration result = graphClient.identity().conditionalAccess().authenticationStrength().policies().byAuthenticationStrengthPolicyId("{authenticationStrengthPolicy-id}").combinationConfigurations().post(authenticationCombinationConfiguration);


const options = {
	authProvider,
};

const client = Client.init(options);

const authenticationCombinationConfiguration = {
    '@odata.type': '#microsoft.graph.x509CertificateCombinationConfiguration', 
    allowedIssuerSkis: [ 
        '9A4248C6AC8C2931AB2A86537818E92E7B6C97B6' 
    ], 
    allowedPolicyOIDs: [], 
    appliesToCombinations: [ 
        'x509CertificateSingleFactor ' 
    ] 
};

await client.api('/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicyId}/combinationConfigurations')
	.post(authenticationCombinationConfiguration);


<?php
use Microsoft\Graph\GraphServiceClient;
use Microsoft\Graph\Generated\Models\X509CertificateCombinationConfiguration;
use Microsoft\Graph\Generated\Models\AuthenticationMethodModes;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);

$requestBody = new X509CertificateCombinationConfiguration();
$requestBody->setOdataType('#microsoft.graph.x509CertificateCombinationConfiguration');
$requestBody->setAllowedIssuerSkis(['9A4248C6AC8C2931AB2A86537818E92E7B6C97B6', 	]);
$requestBody->setAllowedPolicyOIDs([	]);
$requestBody->setAppliesToCombinations([new AuthenticationMethodModes('x509CertificateSingleFactor '),	]);

$result = $graphServiceClient->identity()->conditionalAccess()->authenticationStrength()->policies()->byAuthenticationStrengthPolicyId('authenticationStrengthPolicy-id')->combinationConfigurations()->post($requestBody)->wait();


Import-Module Microsoft.Graph.Identity.SignIns

$params = @{
	"@odata.type" = "#microsoft.graph.x509CertificateCombinationConfiguration"
	allowedIssuerSkis = @(
	"9A4248C6AC8C2931AB2A86537818E92E7B6C97B6"
)
allowedPolicyOIDs = @(
)
appliesToCombinations = @(
"x509CertificateSingleFactor "
)
}

New-MgIdentityConditionalAccessAuthenticationStrengthPolicyCombinationConfiguration -AuthenticationStrengthPolicyId $authenticationStrengthPolicyId -BodyParameter $params


# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.x509_certificate_combination_configuration import X509CertificateCombinationConfiguration
from msgraph.generated.models.authentication_method_modes import AuthenticationMethodModes
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = X509CertificateCombinationConfiguration(
	odata_type = "#microsoft.graph.x509CertificateCombinationConfiguration",
	allowed_issuer_skis = [
		"9A4248C6AC8C2931AB2A86537818E92E7B6C97B6",
	],
	allowed_policy_o_i_ds = [
	],
	applies_to_combinations = [
		AuthenticationMethodModes.X509CertificateSingleFactor,
	],
)

result = await graph_client.identity.conditional_access.authentication_strength.policies.by_authentication_strength_policy_id('authenticationStrengthPolicy-id').combination_configurations.post(request_body)

Réponse

L’exemple suivant illustre la réponse.

HTTP/1.1 201 Created
Content-Type: application/json

{ 
    "@odata.type": "#microsoft.graph.x509CertificateCombinationConfiguration", 
    "id" : "96cb1a17-e45e-4b4f-8b4b-4a9490d63d66",
    "allowedIssuerSkis": [ 
        "9A4248C6AC8C2931AB2A86537818E92E7B6C97B6" 
    ], 
    "allowedPolicyOIDs": [], 
    "appliesToCombinations": [ 
        "x509CertificateSingleFactor " 
    ] 
}

Commentaires

Cette page a-t-elle été utile ?

Last updated on 2024-07-16

Partager via

Créer authenticationCombinationConfiguration

Autorisations

Requête HTTP

En-têtes de demande

Corps de la demande

Réponse

Exemples

Exemple 1 : Créer un objet fido2combinationConfiguration

Demande

Réponse

Exemple 2 : Créer un objet x509CertificateCombinationConfiguration

Demande

Réponse

Commentaires

Ressources supplémentaires