webauthnPublicKeyCredentialCreationOptions resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Defines public key options for the creation of a new public key credential. For more information, see Options for Credential Creation.

Properties

Property	Type	Description
attestation	String	Attestation preference for the Microsoft Entra ID relying party.
authenticatorSelection	webauthnAuthenticatorSelectionCriteria	Properties of WebAuthn authenticators allowed to be used for authentication in Microsoft Entra ID.
challenge	String	A Base64-encoded challenge generated by Microsoft Entra ID and sent back with the registration request to prevent replay attacks.
excludeCredentials	webauthnPublicKeyCredentialDescriptor collection	List of credentials blocked for creations in Microsoft Entra ID.
extensions	webauthnAuthenticationExtensionsClientInputs	Additional processing required by Microsoft Entra ID for the client and WebAuthn authenticator. For example, Microsoft Entra ID might require that particular information be returned in the attestation object.
pubKeyCredParams	webauthnPublicKeyCredentialParameters collection	A set of preferred credential properties for the creation of a new public key credential in Microsoft Entra ID.
rp	webauthnPublicKeyCredentialRpEntity	Information about the relying party (Microsoft Entra ID) responsible for the request.
timeout	Int32	The time in milliseconds that the client is willing to wait for the credential creation operation to complete.
user	webauthnPublicKeyCredentialUserEntity	Information about the user account for which the credential is generated.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.webauthnPublicKeyCredentialCreationOptions",
  "rp": {
    "@odata.type": "microsoft.graph.webauthnPublicKeyCredentialRpEntity"
  },
  "user": {
    "@odata.type": "microsoft.graph.webauthnPublicKeyCredentialUserEntity"
  },
  "challenge": "String",
  "pubKeyCredParams": [
    {
      "@odata.type": "microsoft.graph.webauthnPublicKeyCredentialParameters"
    }
  ],
  "timeout": "Integer",
  "excludeCredentials": [
    {
      "@odata.type": "microsoft.graph.webauthnPublicKeyCredentialDescriptor"
    }
  ],
  "authenticatorSelection": {
    "@odata.type": "microsoft.graph.webauthnAuthenticatorSelectionCriteria"
  },
  "attestation": "String",
  "extensions": {
    "@odata.type": "microsoft.graph.webauthnAuthenticationExtensionsClientInputs"
  }
}