There is a command group 'az_webapp_auth'. This group of commands could 'manage webapp authentication and authorization  to use v2 auth commands  run  az extension add   name authv2  to add the authv2 cli extension'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_webapp_auth_update authv2'.The syntax is: az webapp auth update [--action {allowanonymous, redirecttologinpage, return401, return403, return404}]
                      [--config-file-path]
                      [--custom-host-header]
                      [--custom-proto-header]
                      [--enable-token-store {false, true}]
                      [--enabled {false, true}]
                      [--excluded-paths]
                      [--ids]
                      [--name]
                      [--proxy-convention {custom, noproxy, standard}]
                      [--redirect-provider]
                      [--require-https {false, true}]
                      [--resource-group]
                      [--runtime-version]
                      [--set]
                      [--slot]
                      [--subscription]. The 1th example of the child command would be to use it to 'update the client id of the aad provider already configured', the syntax is: az webapp auth update -g myResourceGroup --name MyWebApp --set identityProviders.azureActiveDirectory.registration.clientId=my-client-id. The 2th example of the child command would be to use it to 'pin the runtime version of the app to 1 4 7', the syntax is: az webapp auth update -g myResourceGroup --name MyWebApp --runtime-version 1.4.7. The 3th example of the child command would be to use it to 'configure the app with file based authentication by setting the config file path', the syntax is: az webapp auth update -g myResourceGroup --name MyWebApp --config-file-path D:\home\site\wwwroot\auth.json. The 4th example of the child command would be to use it to 'configure the app to allow unauthenticated requests to hit the app', the syntax is: az webapp auth update -g myResourceGroup --name MyWebApp --unauthenticated-client-action AllowAnonymous. The 5th example of the child command would be to use it to 'configure the app to redirect unauthenticated requests to the facebook provider', the syntax is: az webapp auth update -g myResourceGroup --name MyWebApp --redirect-provider Facebook. The 6th example of the child command would be to use it to 'configure the app to listen to the forward headers x forwarded host and x forwarded proto', the syntax is: az webapp auth update -g myResourceGroup --name MyWebApp --proxy-convention Standard. The parameter '--action --unauthenticated-client-action' is optional. the action to take when an unauthenticated client attempts to access the app.. The parameter '--config-file-path' is optional. the path of the config file containing auth settings if they come from a file.. The parameter '--custom-host-header --proxy-custom-host-header' is optional. the name of the header containing the host of the request.. The parameter '--custom-proto-header --proxy-custom-proto-header' is optional. the name of the header containing the scheme of the request.. The parameter '--enable-token-store' is optional. true to durably store platform-specific security tokens that are obtained during login flows; otherwise, false.. The parameter '--enabled' is optional. true if the authentication / authorization feature is enabled for the current app; otherwise, false.. The parameter '--excluded-paths' is optional. the list of paths that should be excluded from authentication rules.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--name -n' is optional. name of the web app.. The parameter '--proxy-convention' is optional. the convention used to determine the url of the request made.. The parameter '--redirect-provider' is optional. the default authentication provider to use when multiple providers are configured.. The parameter '--require-https' is optional. false if the authentication/authorization responses not having the https scheme are permissible; otherwise, true.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--runtime-version' is optional. the runtimeversion of the authentication / authorization feature in use for the current app.. The parameter '--set' is optional. value of a specific field within the configuration settings for the azure app service authentication / authorization v2 feature.. The parameter '--slot -s' is optional. the name of the slot. default to the productions slot if not specified.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. 