Custom Authentication Extension Permissions for Microsoft Graph

Application

Permission	ID	Purpose	Description
CustomAuthenticationExtension.Read.All	88bb2658-5d9e-454f-aacd-a3933e079526	Read all custom authentication extensions	Allows the app to read your organization’s custom authentication extensions without a signed-in user.
CustomAuthenticationExtension.ReadWrite.All	c2667967-7050-4e7e-b059-4cbbb3811d03	Read and write all custom authentication extensions	Allows the app to read or write your organization’s custom authentication extensions without a signed-in user.
CustomAuthenticationExtension.Receive.Payload	214e810f-fda8-4fd7-a475-29461495eb00	Receive custom authentication extension HTTP requests	Allows custom authentication extensions associated with the app to receive HTTP requests triggered by an authentication event. The request can include information about a user, client and resource service principals, and other information about the authentication.

Delegated

Permission	ID	Purpose	Description
CustomAuthenticationExtension.Read.All	b2052569-c98c-4f36-a5fb-43e5c111e6d0	Read your oganization’s custom authentication extensions	Allows the app to read your organization’s custom authentication extensions on behalf of the signed-in user.
CustomAuthenticationExtension.ReadWrite.All	8dfcf82f-15d0-43b3-bc78-a958a13a5792	Read and write your organization’s custom authentication extensions	Allows the app to read or write your organization’s custom authentication extensions on behalf of the signed-in user.