Skip to content

certificatebasedauthpki-post-certificateauthorities.md

Latest commit

 

History

History
152 lines (115 loc) · 6.21 KB

certificatebasedauthpki-post-certificateauthorities.md

File metadata and controls

152 lines (115 loc) · 6.21 KB
title Create certificateAuthorityDetail
description Create a new certificateAuthorityDetail object.
author vranganathan
ms.localizationpriority medium
ms.subservice entra-sign-in
doc_type apiPageType
ms.date 06/23/2025

Create certificateAuthorityDetail

Namespace: microsoft.graph

Create a new certificateAuthorityDetail object.

[!INCLUDE national-cloud-support]

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

[!INCLUDE permissions-table]

[!INCLUDE rbac-cert-based-authpkis-apis]

HTTP request

POST /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type application/json. Required.

Request body

In the request body, supply a JSON representation of the certificateAuthorityDetail object.

You can specify the following properties when creating a certificateAuthorityDetail.

Property Type Description
certificateAuthorityType certificateAuthorityType The type of certificate authority. The possible values are: root, intermediate, and unknownFutureValue. Optional. Supports $filter (eq).
certificate Binary The public key of the certificate authority. Required.
displayName String The display name of the certificate authority. Optional.
issuer String The issuer of the certificate authority. Optional.
issuerSubjectKeyIdentifier String The subject key identifier of certificate authority. Optional.
expirationDateTime DateTimeOffset The date and time when the certificate authority expires. Required. Supports $filter (eq) and $orderby.
thumbprint String The thumbprint of certificate authority certificate. Required. Supports $filter (eq, startswith).
certificateRevocationListUrl String The URL to check if the certificate is revoked. Optional.
deltacertificateRevocationListUrl String The list of certificates that have been revoked since the last Certificate Revocation List (CRL) or Delta CRL was published, depending on which is most recent. Optional.
isIssuerHintEnabled Boolean Indicates whether the certificate picker presents the certificate authority to the user to use for authentication. Default value is false. Optional.

Response

If successful, this method returns a 201 Created response code and a certificateAuthorityDetail object in the response body.

Examples

Request

The following example shows a request.

HTTP

POST https://graph.microsoft.com/v1.0/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities
Content-Type: application/json

{
 
  "certificateAuthorityType": "intermediate",
 
}

C#

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Go

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Java

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

JavaScript

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

PHP

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

PowerShell

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Python

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Response

The following example shows the response.

Note: The response object shown here might be shortened for readability.

HTTP/1.1 201 Created
Content-Type: application/json

{
  "@odata.type": "#microsoft.graph.certificateAuthorityDetail",
  "id": "90777c92-2eb3-4a68-931d-4a3e1e1c741f",
  "deletedDateTime": null,
  "certificateAuthorityType": "intermediate",
  "certificate": "Binary",
  "displayName": "Contoso2 CA1",
  "issuer": "Contoso2",
  "issuerSubjectKeyIdentifier": "C0E9....711A",
  "createdDateTime": "2024-10-25T18:05:28Z",
  "expirationDateTime": "2027-08-29T02:05:57Z",
  "thumbprint": "C6FA....4E9CF2",
  "certificateRevocationListUrl": null,
  "deltacertificateRevocationListUrl": null,
  "isIssuerHintEnabled": true
}