Microsoft Graph Certificate Based Authorization Configuration

Microsoft Graph’s certificate-based authentication configuration is a tenant-level setting in Microsoft Entra ID that you manage via the Graph API to enable and govern sign-in using X.509 client certificates. It lets administrators specify which certificate authorities are trusted, how certificate chains and revocation are validated, and how fields in a presented certificate (such as Subject or Subject Alternative Name/UPN) are mapped to a specific user account.

OpenAPI Specification

certificatebasedauthconfiguration-openapi-original.yml Raw ↑
openapi: 3.1.0
info:
  title: Microsoft Graph Certificatebasedauthconfiguration
  description: Needs a description.
paths:
  /certificateBasedAuthConfiguration:
    description: >-
      Provides operations to manage the collection of
      certificateBasedAuthConfiguration entities.
    get:
      tags:
        - certificateBasedAuthConfiguration.certificateBasedAuthConfiguration
      summary: Microsoft Graph Get entities from certificateBasedAuthConfiguration
      operationId: >-
        certificateBasedAuthConfiguration.certificateBasedAuthConfiguration.ListCertificateBasedAuthConfiguration
      parameters:
        - $ref: '#/components/parameters/top'
        - $ref: '#/components/parameters/skip'
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
        - $ref: '#/components/parameters/count'
        - name: $orderby
          in: query
          description: Order items by property values
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          $ref: >-
            #/components/responses/microsoft.graph.certificateBasedAuthConfigurationCollectionResponse
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
        - certificateBasedAuthConfiguration.certificateBasedAuthConfiguration
      summary: Microsoft Graph Add new entity to certificateBasedAuthConfiguration
      operationId: >-
        certificateBasedAuthConfiguration.certificateBasedAuthConfiguration.CreateCertificateBasedAuthConfiguration
      requestBody:
        description: New entity
        content:
          application/json:
            schema:
              $ref: >-
                #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        required: true
      responses:
        2XX:
          description: Created entity
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}:
    description: >-
      Provides operations to manage the collection of
      certificateBasedAuthConfiguration entities.
    get:
      tags:
        - certificateBasedAuthConfiguration.certificateBasedAuthConfiguration
      summary: Microsoft Graph Get entity from certificateBasedAuthConfiguration by key
      operationId: >-
        certificateBasedAuthConfiguration.certificateBasedAuthConfiguration.GetCertificateBasedAuthConfiguration
      parameters:
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          description: Retrieved entity
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
        - certificateBasedAuthConfiguration.certificateBasedAuthConfiguration
      summary: Microsoft Graph Update entity in certificateBasedAuthConfiguration
      operationId: >-
        certificateBasedAuthConfiguration.certificateBasedAuthConfiguration.UpdateCertificateBasedAuthConfiguration
      requestBody:
        description: New property values
        content:
          application/json:
            schema:
              $ref: >-
                #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
        - certificateBasedAuthConfiguration.certificateBasedAuthConfiguration
      summary: Microsoft Graph Delete entity from certificateBasedAuthConfiguration
      operationId: >-
        certificateBasedAuthConfiguration.certificateBasedAuthConfiguration.DeleteCertificateBasedAuthConfiguration
      parameters:
        - name: If-Match
          in: header
          description: ETag
          schema:
            type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    parameters:
      - name: certificateBasedAuthConfiguration-id
        in: path
        description: The unique identifier of certificateBasedAuthConfiguration
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthConfiguration
  /certificateBasedAuthConfiguration/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
        - certificateBasedAuthConfiguration.certificateBasedAuthConfiguration
      summary: Microsoft Graph Get the number of the resource
      operationId: certificateBasedAuthConfiguration.GetCount-e291
      parameters:
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations:
    description: >-
      Provides operations to manage the certificateBasedAuthConfigurations
      property of the microsoft.graph.publicKeyInfrastructureRoot entity.
    get:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph List certificateBasedAuthPki objects
      description: Get a list of the certificateBasedAuthPki objects and their properties.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/publickeyinfrastructureroot-list-certificatebasedauthconfigurations?view=graph-rest-1.0
      operationId: directory.publicKeyInfrastructure.ListCertificateBasedAuthConfigurations
      parameters:
        - $ref: '#/components/parameters/top'
        - $ref: '#/components/parameters/skip'
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
        - $ref: '#/components/parameters/count'
        - name: $orderby
          in: query
          description: Order items by property values
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          $ref: >-
            #/components/responses/microsoft.graph.certificateBasedAuthPkiCollectionResponse
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Create certificateBasedAuthPki
      description: Create a new certificateBasedAuthPki object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/publickeyinfrastructureroot-post-certificatebasedauthconfigurations?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.CreateCertificateBasedAuthConfigurations
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}:
    description: >-
      Provides operations to manage the certificateBasedAuthConfigurations
      property of the microsoft.graph.publicKeyInfrastructureRoot entity.
    get:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Get certificateBasedAuthPki
      description: >-
        Read the properties and relationships of a certificateBasedAuthPki
        object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthpki-get?view=graph-rest-1.0
      operationId: directory.publicKeyInfrastructure.GetCertificateBasedAuthConfigurations
      parameters:
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Update certificateBasedAuthPki
      description: Update the properties of a certificateBasedAuthPki object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthpki-update?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.UpdateCertificateBasedAuthConfigurations
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Delete certificateBasedAuthPki
      description: Delete a certificateBasedAuthPki object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/publickeyinfrastructureroot-delete-certificatebasedauthconfigurations?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.DeleteCertificateBasedAuthConfigurations
      parameters:
        - name: If-Match
          in: header
          description: ETag
          schema:
            type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    parameters:
      - name: certificateBasedAuthPki-id
        in: path
        description: The unique identifier of certificateBasedAuthPki
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthPki
  /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities:
    description: >-
      Provides operations to manage the certificateAuthorities property of the
      microsoft.graph.certificateBasedAuthPki entity.
    get:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph List certificateAuthorityDetail objects
      description: >-
        Get a list of the certificateAuthorityDetail objects and their
        properties.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthpki-list-certificateauthorities?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.ListCertificateAuthorities
      parameters:
        - $ref: '#/components/parameters/top'
        - $ref: '#/components/parameters/skip'
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
        - $ref: '#/components/parameters/count'
        - name: $orderby
          in: query
          description: Order items by property values
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          $ref: >-
            #/components/responses/microsoft.graph.certificateAuthorityDetailCollectionResponse
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Create certificateAuthorityDetail
      description: Create a new certificateAuthorityDetail object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthpki-post-certificateauthorities?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.CreateCertificateAuthorities
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.certificateAuthorityDetail'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateAuthorityDetail
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    parameters:
      - name: certificateBasedAuthPki-id
        in: path
        description: The unique identifier of certificateBasedAuthPki
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthPki
  ? /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}
  : description: >-
      Provides operations to manage the certificateAuthorities property of the
      microsoft.graph.certificateBasedAuthPki entity.
    get:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Get certificateAuthorities from directory
      description: >-
        The collection of certificate authorities contained in this public key
        infrastructure resource.
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.GetCertificateAuthorities
      parameters:
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateAuthorityDetail
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Update certificateAuthorityDetail
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificateauthoritydetail-update?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.UpdateCertificateAuthorities
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.certificateAuthorityDetail'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateAuthorityDetail
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Delete certificateAuthorityDetail
      description: Delete a certificateAuthorityDetail object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthpki-delete-certificateauthorities?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.DeleteCertificateAuthorities
      parameters:
        - name: If-Match
          in: header
          description: ETag
          schema:
            type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    parameters:
      - name: certificateBasedAuthPki-id
        in: path
        description: The unique identifier of certificateBasedAuthPki
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthPki
      - name: certificateAuthorityDetail-id
        in: path
        description: The unique identifier of certificateAuthorityDetail
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateAuthorityDetail
  ? /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/$count
  : description: Provides operations to count the resources in the collection.
    get:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Get the number of the resource
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.certificateAuthorities.GetCount-8126
      parameters:
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
    parameters:
      - name: certificateBasedAuthPki-id
        in: path
        description: The unique identifier of certificateBasedAuthPki
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthPki
  /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/upload:
    description: Provides operations to call the upload method.
    post:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Invoke action upload
      description: >-
        Append additional certificate authority details to a
        certificateBasedAuthPki resource. Only one operation can run at a time
        and this operation can take up to 30 minutes to complete. To know
        whether another upload is in progress, call the Get
        certificateBasedAuthPki. The status property will have the value
        running.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthpki-upload?view=graph-rest-1.0
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.certificateBasedAuthPki.upload
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                uploadUrl:
                  type: string
                sha256FileHash:
                  type: string
        required: true
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
    parameters:
      - name: certificateBasedAuthPki-id
        in: path
        description: The unique identifier of certificateBasedAuthPki
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthPki
  /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
        - directory.publicKeyInfrastructureRoot
      summary: Microsoft Graph Get the number of the resource
      operationId: >-
        directory.publicKeyInfrastructure.certificateBasedAuthConfigurations.GetCount-4154
      parameters:
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /organization/{organization-id}/certificateBasedAuthConfiguration:
    description: >-
      Provides operations to manage the certificateBasedAuthConfiguration
      property of the microsoft.graph.organization entity.
    get:
      tags:
        - organization.certificateBasedAuthConfiguration
      summary: Microsoft Graph List certificateBasedAuthConfigurations
      description: Get a list of certificateBasedAuthConfiguration objects.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthconfiguration-list?view=graph-rest-1.0
      operationId: organization.ListCertificateBasedAuthConfiguration
      parameters:
        - $ref: '#/components/parameters/top'
        - $ref: '#/components/parameters/skip'
        - $ref: '#/components/parameters/search'
        - $ref: '#/components/parameters/filter'
        - $ref: '#/components/parameters/count'
        - name: $orderby
          in: query
          description: Order items by property values
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          $ref: >-
            #/components/responses/microsoft.graph.certificateBasedAuthConfigurationCollectionResponse
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
        - organization.certificateBasedAuthConfiguration
      summary: Microsoft Graph Create certificateBasedAuthConfiguration
      description: Create a new certificateBasedAuthConfiguration object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthconfiguration-post-certificatebasedauthconfiguration?view=graph-rest-1.0
      operationId: organization.CreateCertificateBasedAuthConfiguration
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: >-
                #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    parameters:
      - name: organization-id
        in: path
        description: The unique identifier of organization
        required: true
        schema:
          type: string
        x-ms-docs-key-type: organization
  /organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}:
    description: >-
      Provides operations to manage the certificateBasedAuthConfiguration
      property of the microsoft.graph.organization entity.
    get:
      tags:
        - organization.certificateBasedAuthConfiguration
      summary: Microsoft Graph Get certificateBasedAuthConfiguration
      description: Get the properties of a certificateBasedAuthConfiguration object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthconfiguration-get?view=graph-rest-1.0
      operationId: organization.GetCertificateBasedAuthConfiguration
      parameters:
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/microsoft.graph.certificateBasedAuthConfiguration
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
        - organization.certificateBasedAuthConfiguration
      summary: Microsoft Graph Delete certificateBasedAuthConfiguration
      description: Delete a certificateBasedAuthConfiguration object.
      externalDocs:
        description: Find more info here
        url: >-
          https://learn.microsoft.com/graph/api/certificatebasedauthconfiguration-delete?view=graph-rest-1.0
      operationId: organization.DeleteCertificateBasedAuthConfiguration
      parameters:
        - name: If-Match
          in: header
          description: ETag
          schema:
            type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    parameters:
      - name: organization-id
        in: path
        description: The unique identifier of organization
        required: true
        schema:
          type: string
        x-ms-docs-key-type: organization
      - name: certificateBasedAuthConfiguration-id
        in: path
        description: The unique identifier of certificateBasedAuthConfiguration
        required: true
        schema:
          type: string
        x-ms-docs-key-type: certificateBasedAuthConfiguration
  /organization/{organization-id}/certificateBasedAuthConfiguration/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
   

# --- truncated at 32 KB (39 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/certificatebasedauthconfiguration-openapi-original.yml