There is a command group 'az_containerapp_auth_microsoft'. This group of commands could 'manage containerapp authentication and authorization of the microsoft identity provider'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_containerapp_auth_microsoft_update'.The syntax is: az containerapp auth microsoft update [--allowed-audiences]
                                      [--certificate-issuer]
                                      [--client-id]
                                      [--client-secret]
                                      [--client-secret-certificate-san]
                                      [--client-secret-certificate-thumbprint]
                                      [--client-secret-name]
                                      [--ids]
                                      [--issuer]
                                      [--name]
                                      [--resource-group]
                                      [--subscription]
                                      [--tenant-id]
                                      [--yes]. The 1th example of the child command would be to use it to 'update the open id issuer  client id and client secret for the azure active directory identity provider', the syntax is: az containerapp auth microsoft update  -g myResourceGroup --name my-containerapp \
  --client-id my-client-id --client-secret very_secret_password \
  --issuer https://sts.windows.net/54826b22-38d6-4fb2-bad9-b7983a3e9c5a/. The parameter '--allowed-audiences --allowed-token-audiences' is optional. the configuration settings of the allowed list of audiences from which to validate the jwt token.. The parameter '--certificate-issuer --client-secret-certificate-issuer' is optional. alternative to aad client secret and thumbprint, issuer of a certificate used for signing purposes.. The parameter '--client-id' is optional. the client id of the app used for login.. The parameter '--client-secret' is optional. the client secret.. The parameter '--client-secret-certificate-san --san' is optional. alternative to aad client secret and thumbprint, subject alternative name of a certificate used for signing purposes.. The parameter '--client-secret-certificate-thumbprint --thumbprint' is optional. alternative to aad client secret, thumbprint of a certificate used for signing purposes.. The parameter '--client-secret-name' is optional. the app secret name that contains the client secret of the relying party application.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--issuer' is optional. the openid connect issuer uri that represents the entity which issues access tokens for this application.. The parameter '--name -n' is optional. the name of the containerapp. a name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--tenant-id' is optional. the tenant id of the application.. The parameter '--yes -y' is optional. do not prompt for confirmation.. 