There is a command group 'az_webapp_auth classic'. This group of commands could 'manage webapp authentication and authorization in the classic format'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_webapp_auth classic_update'.The syntax is: az webapp auth-classic update [--aad-allowed-token-audiences]
                              [--aad-client-id]
                              [--aad-client-secret]
                              [--aad-client-secret-certificate-thumbprint]
                              [--aad-client-secret-setting-name]
                              [--aad-token-issuer-url]
                              [--action {allowanonymous, loginwithazureactivedirectory, loginwithfacebook, loginwithgoogle, loginwithmicrosoftaccount, loginwithtwitter}]
                              [--allowed-redirect-urls]
                              [--enabled {false, true}]
                              [--facebook-app-id]
                              [--facebook-app-secret]
                              [--facebook-app-secret-setting-name]
                              [--facebook-oauth-scopes]
                              [--github-client-id]
                              [--github-client-secret]
                              [--github-client-secret-setting-name]
                              [--github-oauth-scopes]
                              [--google-client-id]
                              [--google-client-secret]
                              [--google-client-secret-setting-name]
                              [--google-oauth-scopes]
                              [--ids]
                              [--microsoft-account-client-id]
                              [--microsoft-account-client-secret]
                              [--microsoft-account-client-secret-setting-name]
                              [--microsoft-account-oauth-scopes]
                              [--name]
                              [--resource-group]
                              [--runtime-version]
                              [--slot]
                              [--subscription]
                              [--token-refresh-extension-hours]
                              [--token-store {false, true}]
                              [--twitter-consumer-key]
                              [--twitter-consumer-secret]
                              [--twitter-consumer-secret-setting-name]. The 1th example of the child command would be to use it to 'enable azure active directory by enabling authentication and setting azure active directory associated parameters  default provider is set to aad  must have created a aad service principal beforehand', the syntax is: az webapp auth-classic update  -g myResourceGroup --name MyWebApp --enabled true \
  --action LoginWithAzureActiveDirectory \
  --aad-allowed-token-audiences https://webapp_name.azurewebsites.net/.auth/login/aad/callback \
  --aad-client-id my-client-id --aad-client-secret very_secret_password \
  --aad-token-issuer-url https://sts.windows.net/54826b22-38d6-4fb2-bad9-b7983a3e9c5a/. The 2th example of the child command would be to use it to 'enable facebook authentication by setting fb associated parameters and turning on public profile and email scopes  allow anonymous users', the syntax is: az webapp auth-classic update -g myResourceGroup --name MyWebApp --action AllowAnonymous \
  --facebook-app-id my_fb_id --facebook-app-secret my_fb_secret \
  --facebook-oauth-scopes public_profile email. The parameter '--aad-allowed-token-audiences --allowed-audiences' is optional. one or more token audiences (space-delimited).. The parameter '--aad-client-id' is optional. application id to integrate aad organization account sign-in into your web app.. The parameter '--aad-client-secret' is optional. aad application secret.. The parameter '--aad-client-secret-certificate-thumbprint --thumbprint' is optional. alternative to aad client secret, thumbprint of a certificate used for signing purposes.. The parameter '--aad-client-secret-setting-name --aad-secret-setting' is optional. the app setting name that contains the client secret of the relying party application.. The parameter '--aad-token-issuer-url' is optional. this url can be found in the json output returned from your active directory endpoint using your tenantid. the endpoint can be queried from `az cloud show` at "endpoints.activedirectory". the tenantid can be found using `az account show`. get the "issuer" from the json at <active directory endpoint>/<tenantid>/.well-known/openid-configuration.. The parameter '--action' is optional. the action to take when an unauthenticated client attempts to access the app.. The parameter '--allowed-redirect-urls' is optional. one or more urls (space-delimited).. The parameter '--enabled' is optional. true if the authentication / authorization feature is enabled for the current app; otherwise, false.. The parameter '--facebook-app-id' is optional. application id to integrate facebook sign-in into your web app.. The parameter '--facebook-app-secret' is optional. facebook application client secret.. The parameter '--facebook-app-secret-setting-name --fb-secret-setting' is optional. the app setting name that contains the app secret used for facebook login.. The parameter '--facebook-oauth-scopes' is optional. one or more facebook authentication scopes (space-delimited).. The parameter '--github-client-id' is optional. the client id of the github app used for login.. The parameter '--github-client-secret' is optional. the client secret of the github app used for login.. The parameter '--github-client-secret-setting-name --github-secret-setting' is optional. the app setting name that contains the client secret of the github app used for github login.. The parameter '--github-oauth-scopes --github-scopes' is optional. the oauth 2.0 scopes that will be requested as part of github login authentication.. The parameter '--google-client-id' is optional. application id to integrate google sign-in into your web app.. The parameter '--google-client-secret' is optional. google application client secret.. The parameter '--google-client-secret-setting-name --google-secret-setting' is optional. the app setting name that contains the client secret associated with the google web application.. The parameter '--google-oauth-scopes' is optional. one or more google authentication scopes (space-delimited).. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--microsoft-account-client-id --msa-client' is optional. aad v2 application id to integrate microsoft account sign-in into your web app.. The parameter '--microsoft-account-client-secret --msa-secret' is optional. aad v2 application client secret.. The parameter '--microsoft-account-client-secret-setting-name --msa-secret-setting' is optional. the app setting name containing the oauth 2.0 client secret that was created for the app used for authentication.. The parameter '--microsoft-account-oauth-scopes --msa-scopes' is optional. one or more microsoft authentification scopes (space-delimited).. The parameter '--name -n' is optional. name of the web app.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--runtime-version' is optional. runtime version of the authentication/authorization feature in use for the current app.. The parameter '--slot -s' is optional. the name of the slot. default to the productions slot if not specified.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--token-refresh-extension-hours --token-refresh-hours' is optional. hours, must be formattable into a float.. The parameter '--token-store' is optional. use app service token store.. The parameter '--twitter-consumer-key' is optional. application id to integrate twitter sign-in into your web app.. The parameter '--twitter-consumer-secret --twitter-secret' is optional. twitter application client secret.. The parameter '--twitter-consumer-secret-setting-name --twitter-secret-setting' is optional. the app setting name that contains the oauth 1.0a consumer secret of the twitter application used for sign-in.. 