Skip to content

Application Gateway Entra JWT Validation Feature Support #38335

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kamboj-prjwl merged 2 commits into from
Oct 22, 2025
Merged

Application Gateway Entra JWT Validation Feature Support #38335

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
8babb30
Application Gateway Entra JWT Validation Feature Support
Oct 21, 2025
87ab1b4
fixing doe style issues
Oct 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
94 changes: 84 additions & 10 deletions ...tion/network/resource-manager/Microsoft.Network/stable/2025-03-01/applicationGateway.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{

Check notice on line 1 in specification/network/resource-manager/Microsoft.Network/stable/2025-03-01/applicationGateway.json

View workflow job for this annotation

GitHub Actions / TypeSpec Requirement 

Your service description will soon be required to convert from OpenAPI to TypeSpec. See https://aka.ms/azsdk/typespec.
"swagger": "2.0",
"info": {
"title": "NetworkManagementClient",
Expand Down Expand Up @@ -69,15 +69,15 @@
}
],
"responses": {
"200": {
"description": "Delete successful."
},
"202": {
"description": "Accepted and the operation will complete asynchronously."
},
"204": {
"description": "Request successful. Resource with the specified name does not exist."
},
"200": {
"description": "Delete successful."
},
"default": {
"description": "Error response describing why the operation failed.",
"schema": {
Expand Down Expand Up @@ -176,14 +176,14 @@
}
],
"responses": {
"201": {
"description": "Create successful. The operation returns the resulting ApplicationGateway resource.",
"200": {
"description": "Update successful. The operation returns the resulting ApplicationGateway resource.",
"schema": {
"$ref": "#/definitions/ApplicationGateway"
}
},
"200": {
"description": "Update successful. The operation returns the resulting ApplicationGateway resource.",
"201": {
"description": "Create successful. The operation returns the resulting ApplicationGateway resource.",
"schema": {
"$ref": "#/definitions/ApplicationGateway"
}
Expand Down Expand Up @@ -688,15 +688,15 @@
}
],
"responses": {
"200": {
"description": "Delete successful."
},
"202": {
"description": "Accepted and the operation will complete asynchronously."
},
"204": {
"description": "Request successful. Resource with the specified name does not exist."
},
"200": {
"description": "Delete successful."
},
"default": {
"description": "Error response describing why the operation failed.",
"schema": {
Expand Down Expand Up @@ -2454,6 +2454,10 @@
"$ref": "./network.json#/definitions/SubResource",
"description": "Load Distribution Policy resource of the application gateway."
},
"entraJWTValidationConfig": {
"$ref": "./network.json#/definitions/SubResource",
"description": "Entra JWT validation configuration resource of the application gateway."
},
"provisioningState": {
"readOnly": true,
"$ref": "./network.json#/definitions/ProvisioningState",
Expand Down Expand Up @@ -3268,6 +3272,13 @@
},
"description": "Load distribution policies of the application gateway resource."
},
"entraJWTValidationConfigs": {
"type": "array",
"items": {
"$ref": "#/definitions/ApplicationGatewayEntraJWTValidationConfig"
},
"description": "Entra JWT validation configurations for the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)."
},
"globalConfiguration": {
"$ref": "#/definitions/ApplicationGatewayGlobalConfiguration",
"description": "Global Configuration."
Expand Down Expand Up @@ -4085,6 +4096,69 @@
"modelAsString": true
}
},
"ApplicationGatewayEntraJWTValidationConfigPropertiesFormat": {
"type": "object",
"properties": {
"unAuthorizedRequestAction": {
"type": "string",
"description": "Unauthorized request action.",
"enum": [
"Deny",
"Allow"
],
"x-ms-enum": {
"name": "ApplicationGatewayUnAuthorizedRequestAction",
"modelAsString": true
}
},
"tenantId": {
"type": "string",
"description": "The Tenant ID of the Microsoft Entra ID application."
},
"clientId": {
"type": "string",
"description": "The Client ID of the Microsoft Entra ID application."
},
"audiences": {
"type": "array",
"items": {
"type": "string"
},
"description": "List of acceptable audience claims that can be present in the token (aud claim). A maximum of 5 audiences are permitted."
},
"provisioningState": {
"readOnly": true,
"$ref": "./network.json#/definitions/ProvisioningState",
"description": "The provisioning state of the entra jwt validation configuration resource."
}
},
"description": "Properties of entra jwt validation configuration of the application gateway."
},
"ApplicationGatewayEntraJWTValidationConfig": {
"type": "object",
"properties": {
"properties": {
"x-ms-client-flatten": true,
"$ref": "#/definitions/ApplicationGatewayEntraJWTValidationConfigPropertiesFormat",
"description": "Properties of the application gateway entra jwt validation configuration."
},
"name": {
"type": "string",
"description": "Name of the entra jwt validation configuration that is unique within an application gateway."
},
"etag": {
"readOnly": true,
"type": "string",
"description": "A unique read-only string that changes whenever the resource is updated."
}
},
"allOf": [
{
"$ref": "./network.json#/definitions/SubResource"
}
],
"description": "Entra JWT Validation Configuration of an application gateway."
},
"ApplicationGatewayGlobalConfiguration": {
"properties": {
"enableRequestBuffering": {
Expand Down
43 changes: 43 additions & 0 deletions ...source-manager/Microsoft.Network/stable/2025-03-01/examples/ApplicationGatewayCreate.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -201,6 +201,9 @@
},
"rewriteRuleSet": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/rewriteRuleSets/rewriteRuleSet1"
},
"entraJWTValidationConfig": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1"
}
}
}
Expand Down Expand Up @@ -243,6 +246,16 @@
}
}
],
"entraJWTValidationConfigs": [
{
"name": "entraJWTValidationConfig1",
"properties": {
"unAuthorizedRequestAction": "Deny",
"tenantId": "70a036f6-8e4d-4615-bad6-149c02e7720d",
"clientId": "37293f5a-97b3-451d-b786-f532d711c9ff"
}
}
],
"globalConfiguration": {
"enableRequestBuffering": true,
"enableResponseBuffering": true
Expand Down Expand Up @@ -457,6 +470,9 @@
},
"rewriteRuleSet": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/rewriteRuleSets/rewriteRuleSet1"
},
"entraJWTValidationConfig": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1"
}
}
}
Expand Down Expand Up @@ -506,6 +522,18 @@
"probes": [],
"redirectConfigurations": [],
"privateEndpointConnections": [],
"entraJWTValidationConfigs": [
{
"name": "entraJWTValidationConfig1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1",
"properties": {
"provisioningState": "Succeeded",
"unAuthorizedRequestAction": "Deny",
"tenantId": "70a036f6-8e4d-4615-bad6-149c02e7720d",
"clientId": "37293f5a-97b3-451d-b786-f532d711c9ff"
}
}
],
"globalConfiguration": {
"enableRequestBuffering": true,
"enableResponseBuffering": true
Expand Down Expand Up @@ -718,6 +746,9 @@
},
"rewriteRuleSet": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/rewriteRuleSets/rewriteRuleSet1"
},
"entraJWTValidationConfig": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1"
}
}
}
Expand Down Expand Up @@ -767,6 +798,18 @@
"probes": [],
"redirectConfigurations": [],
"privateEndpointConnections": [],
"entraJWTValidationConfigs": [
{
"name": "entraJWTValidationConfig1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1",
"properties": {
"provisioningState": "Succeeded",
"unAuthorizedRequestAction": "Deny",
"tenantId": "70a036f6-8e4d-4615-bad6-149c02e7720d",
"clientId": "37293f5a-97b3-451d-b786-f532d711c9ff"
}
}
],
"globalConfiguration": {
"enableRequestBuffering": true,
"enableResponseBuffering": true
Expand Down
15 changes: 15 additions & 0 deletions .../resource-manager/Microsoft.Network/stable/2025-03-01/examples/ApplicationGatewayGet.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -265,6 +265,9 @@
},
"urlPathMap": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/urlPathMaps/pathMap1"
},
"entraJWTValidationConfig": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1"
}
}
}
Expand Down Expand Up @@ -378,6 +381,18 @@
}
}
],
"entraJWTValidationConfigs": [
{
"name": "entraJWTValidationConfig1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1",
"properties": {
"provisioningState": "Succeeded",
"unAuthorizedRequestAction": "Deny",
"tenantId": "70a036f6-8e4d-4615-bad6-149c02e7720d",
"clientId": "37293f5a-97b3-451d-b786-f532d711c9ff"
}
}
],
"globalConfiguration": {
"enableRequestBuffering": true,
"enableResponseBuffering": true
Expand Down
15 changes: 15 additions & 0 deletions ...resource-manager/Microsoft.Network/stable/2025-03-01/examples/ApplicationGatewayList.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -251,6 +251,9 @@
},
"loadDistributionPolicy": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/loadDistributionPolicies/ldp1"
},
"entraJWTValidationConfig": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1"
}
}
},
Expand Down Expand Up @@ -379,6 +382,18 @@
}
}
],
"entraJWTValidationConfigs": [
{
"name": "entraJWTValidationConfig1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1",
"properties": {
"provisioningState": "Succeeded",
"unAuthorizedRequestAction": "Deny",
"tenantId": "70a036f6-8e4d-4615-bad6-149c02e7720d",
"clientId": "37293f5a-97b3-451d-b786-f532d711c9ff"
}
}
],
"globalConfiguration": {
"enableRequestBuffering": true,
"enableResponseBuffering": true
Expand Down
15 changes: 15 additions & 0 deletions ...ource-manager/Microsoft.Network/stable/2025-03-01/examples/ApplicationGatewayListAll.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -250,6 +250,9 @@
},
"loadDistributionPolicy": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/loadDistributionPolicies/ldp1"
},
"entraJWTValidationConfig": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1"
}
}
},
Expand Down Expand Up @@ -378,6 +381,18 @@
}
}
],
"entraJWTValidationConfigs": [
{
"name": "entraJWTValidationConfig1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/entraJWTValidationConfigs/entraJWTValidationConfig1",
"properties": {
"provisioningState": "Succeeded",
"unAuthorizedRequestAction": "Deny",
"tenantId": "70a036f6-8e4d-4615-bad6-149c02e7720d",
"clientId": "37293f5a-97b3-451d-b786-f532d711c9ff"
}
}
],
"globalConfiguration": {
"enableRequestBuffering": true,
"enableResponseBuffering": true
Expand Down