ESC
Type to search...

CustomAuthenticationExtension.Read.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read All Resources

Allows the app to read your organization's custom authentication extensions without a signed-in user.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read all custom authentication extensions

Allows the app to read your organization's custom authentication extensions without a signed-in user.

Delegated Permission Admin consent required

Read your organization's custom authentication extensions

Allows the app to read your organization's custom authentication extensions on behalf of the signed-in user.

Properties

Microsoft Graph v1.0 exact-category-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
authenticationConfiguration customExtensionAuthenticationConfiguration The authentication configuration for the customAuthenticationExtension. Inherited from customCalloutExtension.
behaviorOnError customExtensionBehaviorOnError The behaviour on error for the custom authentication extension.
clientConfiguration customExtensionClientConfiguration The connection settings for the customAuthenticationExtension. Inherited from customCalloutExtension.
description StringNullable The description of the customAuthenticationExtension. Inherited from customCalloutExtension.
displayName StringNullable The display name for the customAuthenticationExtension. Inherited from customCalloutExtension.
endpointConfiguration customExtensionEndpointConfiguration The HTTP endpoint that this custom extension calls. Inherited from customCalloutExtension.
id String Identifier for the customAuthenticationExtension. Inherited from entity.

JSON Representation

Microsoft Graph v1.0 exact-category-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation
{
  "@odata.type": "#microsoft.graph.customAuthenticationExtension",
  "id": "String (identifier)",
  "authenticationConfiguration": {
    "@odata.type": "microsoft.graph.customExtensionAuthenticationConfiguration"
  },
  "clientConfiguration": {
    "@odata.type": "microsoft.graph.customExtensionClientConfiguration"
  },
  "description": "String",
  "displayName": "String",
  "endpointConfiguration": {
    "@odata.type": "microsoft.graph.customExtensionEndpointConfiguration"
  },
  "behaviorOnError": {
    "@odata.type": "microsoft.graph.customExtensionBehaviorOnError"
  }
}

Relationships

Relationships metadata is not available for this permission mapping.

View resource documentation

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identity/customAuthenticationExtensions
GET /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}
POST /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}/validateAuthenticationConfiguration
POST /identity/customAuthenticationExtensions/validateAuthenticationConfiguration
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identity/customAuthenticationExtensions
GET /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}
POST /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}/validateAuthenticationConfiguration
POST /identity/customAuthenticationExtensions/validateAuthenticationConfiguration
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgIdentityCustomAuthenticationExtension /identity/customAuthenticationExtensions
List customAuthenticationExtensions
Get-MgIdentityCustomAuthenticationExtension /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}
Get customAuthenticationExtension
Test-MgIdentityCustomAuthenticationExtensionAuthenticationConfiguration /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}/validateAuthenticationConfiguration
customAuthenticationExtension: validateAuthenticationConfiguration
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaIdentityCustomAuthenticationExtension /identity/customAuthenticationExtensions
List customAuthenticationExtensions
Get-MgBetaIdentityCustomAuthenticationExtension /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}
Get customAuthenticationExtension
Test-MgBetaIdentityCustomAuthenticationExtensionAuthenticationConfiguration /identity/customAuthenticationExtensions/{customAuthenticationExtensionId}/validateAuthenticationConfiguration
customAuthenticationExtension: validateAuthenticationConfiguration

Code Examples

C# / .NET SDK
customAuthenticationExtension: validateAuthenticationConfiguration
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.CustomAuthenticationExtensions["{customAuthenticationExtension-id}"].ValidateAuthenticationConfiguration.PostAsync();
JavaScript
customAuthenticationExtension: validateAuthenticationConfiguration
const options = {
	authProvider,
};

const client = Client.init(options);

await client.api('/identity/customAuthenticationExtensions/9f39f3bb-457c-4a2a-8099-0e480e7ea142/validateAuthenticationConfiguration')
	.post();
PowerShell
customAuthenticationExtension: validateAuthenticationConfiguration
Import-Module Microsoft.Graph.Identity.SignIns

Test-MgIdentityCustomAuthenticationExtensionAuthenticationConfiguration -CustomAuthenticationExtensionId $customAuthenticationExtensionId
Python
customAuthenticationExtension: validateAuthenticationConfiguration
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.identity.custom_authentication_extensions.by_custom_authentication_extension_id('customAuthenticationExtension-id').validate_authentication_configuration.post()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for CustomAuthenticationExtension.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.