{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/access_azureAD",
  "title": "Azure AD",
  "allOf": [
    {
      "$ref": "#/components/schemas/access_identity-provider"
    },
    {
      "properties": {
        "config": {
          "allOf": [
            {
              "$ref": "#/components/schemas/access_generic-oauth-config"
            },
            {
              "$ref": "#/components/schemas/access_custom-claims-support"
            },
            {
              "properties": {
                "conditional_access_enabled": {
                  "description": "Should Cloudflare try to load authentication contexts from your account",
                  "type": "boolean"
                },
                "directory_id": {
                  "description": "Your Azure directory uuid",
                  "example": "<your azure directory uuid>",
                  "type": "string"
                },
                "prompt": {
                  "description": "Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether.",
                  "enum": [
                    "login",
                    "select_account",
                    "none"
                  ],
                  "type": "string"
                },
                "support_groups": {
                  "description": "Should Cloudflare try to load groups from your account",
                  "type": "boolean"
                }
              },
              "type": "object"
            }
          ]
        }
      },
      "type": "object"
    }
  ],
  "type": "object"
}