Enum IapAuthorizationPromptType

The type of user interaction required for authentication and consent while signing in to the Identity-Aware Proxy (IAP).

public enum IapAuthorizationPromptType

Name	Description
Consent	Displays a consent dialog after user signs in, prompting them to grant necessary permissions to the application. If consent cannot be obtained, an error is returned.
Login	Disables single sign-on (SSO) functionality, requiring users to enter their credentials for every login attempt. It enhances security by requiring authentication for every session, rather than relying on a previously authenticated Identity-Aware Proxy (IAP) session.
None	User interface is not displayed for authentication and consent while signing in to the Identity-Aware Proxy (IAP). If no authenticated Identity-Aware Proxy (IAP) session is found, an error is returned. This can be used as a method to check for existing authentication and/or consent.
SelectAccount	Interrupts the single sign-on (SSO) experience when one or more authenticated Identity-Aware Proxy (IAP) sessions are detected, presenting users with an account selection interface to choose their preferred account.
Unspecified	The default user interaction behavior for the Identity-Aware Proxy (IAP). This optimizes the user experience by minimizing unnecessary credential prompts. The single sign-on (SSO) experience is determined by the authenticated Identity-Aware Proxy (IAP) session within the web session. User will not be prompted to enter credentials unless necessary. If multiple user accounts are signed in, a select account interface will be displayed to allow users to choose their desired account.