Role ID Purpose Description
CustomAuthenticationExtension.Read.All 88bb2658-5d9e-454f-aacd-a3933e079526 Read all custom authentication extensions Allows the app to read your organization’s custom authentication extensions without a signed-in user.
CustomAuthenticationExtension.ReadWrite.All c2667967-7050-4e7e-b059-4cbbb3811d03 Read and write all custom authentication extensions Allows the app to read or write your organization’s custom authentication extensions without a signed-in user.
CustomAuthenticationExtension.Receive.Payload 214e810f-fda8-4fd7-a475-29461495eb00 Receive custom authentication extension HTTP requests Allows custom authentication extensions associated with the app to receive HTTP requests triggered by an authentication event. The request can include information about a user, client and resource service principals, and other information about the authentication.