diff --git a/schemas/2022-01-01-preview/Microsoft.App.json b/schemas/2022-01-01-preview/Microsoft.App.json
index d516dd1519..8c21c1a527 100644
--- a/schemas/2022-01-01-preview/Microsoft.App.json
+++ b/schemas/2022-01-01-preview/Microsoft.App.json
@@ -109,7 +109,7 @@
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "Auth configuration resource specific properties"
+          "description": "AuthConfig resource specific properties"
         },
         "type": {
           "type": "string",
@@ -399,45 +399,75 @@
       },
       "description": "The configuration settings of the Allowed Audiences validation flow."
     },
+    "AllowedPrincipals": {
+      "type": "object",
+      "properties": {
+        "groups": {
+          "oneOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The list of the allowed groups."
+        },
+        "identities": {
+          "oneOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The list of the allowed identities."
+        }
+      },
+      "description": "The configuration settings of the Azure Active Directory allowed principals."
+    },
     "Apple": {
       "type": "object",
       "properties": {
-        "login": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/LoginScopes"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the login flow, including the scopes that should be requested."
+          "description": "<code>false</code> if the Apple provider should not be enabled despite the set registration; otherwise, <code>true</code>."
         },
-        "registration": {
+        "login": {
           "oneOf": [
             {
-              "$ref": "#/definitions/AppleRegistration"
+              "$ref": "#/definitions/LoginScopes"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the registration for the Apple provider"
+          "description": "The configuration settings of the login flow, including the scopes that should be requested."
         },
-        "state": {
+        "registration": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/AppleRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the Apple provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the registration for the Apple provider"
         }
       },
       "description": "The configuration settings of the Apple provider."
@@ -449,9 +479,9 @@
           "type": "string",
           "description": "The Client ID of the app used for login."
         },
-        "clientSecretRefName": {
+        "clientSecretSettingName": {
           "type": "string",
-          "description": "The app secret ref name that contains the client secret."
+          "description": "The app setting name that contains the client secret."
         }
       },
       "description": "The configuration settings of the registration for the Apple provider"
@@ -484,9 +514,9 @@
           "type": "string",
           "description": "The App ID of the app used for login."
         },
-        "appSecretRefName": {
+        "appSecretSettingName": {
           "type": "string",
-          "description": "The app secret ref name that contains the app secret."
+          "description": "The app setting name that contains the app secret."
         }
       },
       "description": "The configuration settings of the app registration for providers that have app ids and app secrets"
@@ -503,7 +533,7 @@
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings that determines the validation flow of users using ContainerApp Authentication/Authorization."
+          "description": "The configuration settings that determines the validation flow of users using ContainerApp Service Authentication/Authorization."
         },
         "httpSettings": {
           "oneOf": [
@@ -514,7 +544,7 @@
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the HTTP requests for authentication and authorization requests made against ContainerApp Authentication/Authorization."
+          "description": "The configuration settings of the HTTP requests for authentication and authorization requests made against ContainerApp Service Authentication/Authorization."
         },
         "identityProviders": {
           "oneOf": [
@@ -525,7 +555,7 @@
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of each of the identity providers used to configure ContainerApp Authentication/Authorization."
+          "description": "The configuration settings of each of the identity providers used to configure ContainerApp Service Authentication/Authorization."
         },
         "login": {
           "oneOf": [
@@ -536,65 +566,89 @@
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the login flow of users using ContainerApp Authentication/Authorization."
+          "description": "The configuration settings of the login flow of users using ContainerApp Service Authentication/Authorization."
         },
-        "state": {
+        "platform": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/AuthPlatform"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the platform of ContainerApp Service Authentication/Authorization."
+        }
+      },
+      "description": "AuthConfig resource specific properties"
+    },
+    "AuthPlatform": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "oneOf": [
+            {
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Enabled</code> if the Authentication / Authorization feature is enabled for the current app; otherwise, <code>Disabled</code>."
+          "description": "<code>true</code> if the Authentication / Authorization feature is enabled for the current app; otherwise, <code>false</code>."
+        },
+        "runtimeVersion": {
+          "type": "string",
+          "description": "The RuntimeVersion of the Authentication / Authorization feature in use for the current app.\nThe setting in this value can control the behavior of certain features in the Authentication / Authorization module."
         }
       },
-      "description": "Auth configuration resource specific properties"
+      "description": "The configuration settings of the platform of ContainerApp Service Authentication/Authorization."
     },
     "AzureActiveDirectory": {
       "type": "object",
       "properties": {
-        "login": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/AzureActiveDirectoryLogin"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the Azure Active Directory login flow."
+          "description": "<code>false</code> if the Azure Active Directory provider should not be enabled despite the set registration; otherwise, <code>true</code>."
         },
-        "registration": {
+        "isAutoProvisioned": {
           "oneOf": [
             {
-              "$ref": "#/definitions/AzureActiveDirectoryRegistration"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the Azure Active Directory app registration."
+          "description": "Gets a value indicating whether the Azure AD configuration was auto-provisioned using 1st party tooling.\nThis is an internal flag primarily intended to support the Azure Management Portal. Users should not\nread or write to this property."
         },
-        "state": {
+        "login": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/AzureActiveDirectoryLogin"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the Azure Active Directory login flow."
+        },
+        "registration": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/AzureActiveDirectoryRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the Azure Active Directory provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the Azure Active Directory app registration."
         },
         "validation": {
           "oneOf": [
@@ -613,14 +667,10 @@
     "AzureActiveDirectoryLogin": {
       "type": "object",
       "properties": {
-        "disableWwwAuthenticate": {
+        "disableWWWAuthenticate": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "True",
-                "False"
-              ]
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
@@ -664,9 +714,9 @@
           "type": "string",
           "description": "An alternative to the client secret, that is the thumbprint of a certificate used for signing purposes. This property acts as\na replacement for the Client Secret. It is also optional."
         },
-        "clientSecretRefName": {
+        "clientSecretSettingName": {
           "type": "string",
-          "description": "The app secret ref name that contains the client secret of the relying party application."
+          "description": "The app setting name that contains the client secret of the relying party application."
         },
         "openIdIssuer": {
           "type": "string",
@@ -691,6 +741,28 @@
             }
           ],
           "description": "The list of audiences that can make successful authentication/authorization requests."
+        },
+        "defaultAuthorizationPolicy": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/DefaultAuthorizationPolicy"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the Azure Active Directory default authorization policy."
+        },
+        "jwtClaimChecks": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/JwtClaimChecks"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the checks that should be made while validating the JWT Claims."
         }
       },
       "description": "The configuration settings of the Azure Active Directory token validation flow."
@@ -750,39 +822,35 @@
       },
       "description": "Azure File Properties."
     },
-    "AzureStaticWebApp": {
+    "AzureStaticWebApps": {
       "type": "object",
       "properties": {
-        "registration": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/AzureStaticWebAppRegistration"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the registration for the Azure Static Web Apps provider"
+          "description": "<code>false</code> if the Azure Static Web Apps provider should not be enabled despite the set registration; otherwise, <code>true</code>."
         },
-        "state": {
+        "registration": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/AzureStaticWebAppsRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the Azure Static Web Apps provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the registration for the Azure Static Web Apps provider"
         }
       },
       "description": "The configuration settings of the Azure Static Web Apps provider."
     },
-    "AzureStaticWebAppRegistration": {
+    "AzureStaticWebAppsRegistration": {
       "type": "object",
       "properties": {
         "clientId": {
@@ -821,9 +889,9 @@
           "type": "string",
           "description": "The Client ID of the app used for login."
         },
-        "clientSecretRefName": {
+        "clientSecretSettingName": {
           "type": "string",
-          "description": "The app secret ref name that contains the client secret."
+          "description": "The app setting name that contains the client secret."
         }
       },
       "description": "The configuration settings of the app registration for providers that have client ids and client secrets"
@@ -1246,7 +1314,7 @@
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "Auth configuration resource specific properties"
+          "description": "AuthConfig resource specific properties"
         },
         "type": {
           "type": "string",
@@ -1323,6 +1391,31 @@
       },
       "description": "Container App container resource requirements."
     },
+    "CookieExpiration": {
+      "type": "object",
+      "properties": {
+        "convention": {
+          "oneOf": [
+            {
+              "type": "string",
+              "enum": [
+                "FixedTime",
+                "IdentityProviderDerived"
+              ]
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The convention used when determining the session cookie's expiration."
+        },
+        "timeToExpiration": {
+          "type": "string",
+          "description": "The time after the request is made when the session cookie should expire."
+        }
+      },
+      "description": "The configuration settings of the session cookie's expiration."
+    },
     "CustomDomain": {
       "type": "object",
       "properties": {
@@ -1359,42 +1452,38 @@
     "CustomOpenIdConnectProvider": {
       "type": "object",
       "properties": {
-        "login": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/OpenIdConnectLogin"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the login flow of the custom Open ID Connect provider."
+          "description": "<code>false</code> if the custom Open ID provider provider should not be enabled; otherwise, <code>true</code>."
         },
-        "registration": {
+        "login": {
           "oneOf": [
             {
-              "$ref": "#/definitions/OpenIdConnectRegistration"
+              "$ref": "#/definitions/OpenIdConnectLogin"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the app registration for the custom Open ID Connect provider."
+          "description": "The configuration settings of the login flow of the custom Open ID Connect provider."
         },
-        "state": {
+        "registration": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/OpenIdConnectRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the custom Open ID Connect provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the app registration for the custom Open ID Connect provider."
         }
       },
       "description": "The configuration settings of the custom Open ID Connect provider."
@@ -1574,6 +1663,37 @@
       },
       "description": "Dapr component metadata."
     },
+    "DefaultAuthorizationPolicy": {
+      "type": "object",
+      "properties": {
+        "allowedApplications": {
+          "oneOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the Azure Active Directory allowed applications."
+        },
+        "allowedPrincipals": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/AllowedPrincipals"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the Azure Active Directory allowed principals."
+        }
+      },
+      "description": "The configuration settings of the Azure Active Directory default authorization policy."
+    },
     "EnvironmentVar": {
       "type": "object",
       "properties": {
@@ -1595,6 +1715,17 @@
     "Facebook": {
       "type": "object",
       "properties": {
+        "enabled": {
+          "oneOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "<code>false</code> if the Facebook provider should not be enabled despite the set registration; otherwise, <code>true</code>."
+        },
         "graphApiVersion": {
           "type": "string",
           "description": "The version of the Facebook api to be used while logging in."
@@ -1620,64 +1751,75 @@
             }
           ],
           "description": "The configuration settings of the app registration for providers that have app ids and app secrets"
-        },
-        "state": {
+        }
+      },
+      "description": "The configuration settings of the Facebook provider."
+    },
+    "ForwardProxy": {
+      "type": "object",
+      "properties": {
+        "convention": {
           "oneOf": [
             {
               "type": "string",
               "enum": [
-                "Enabled",
-                "Disabled"
+                "NoProxy",
+                "Standard",
+                "Custom"
               ]
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the Facebook provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The convention used to determine the url of the request made."
+        },
+        "customHostHeaderName": {
+          "type": "string",
+          "description": "The name of the header containing the host of the request."
+        },
+        "customProtoHeaderName": {
+          "type": "string",
+          "description": "The name of the header containing the scheme of the request."
         }
       },
-      "description": "The configuration settings of the Facebook provider."
+      "description": "The configuration settings of a forward proxy used to make the requests."
     },
     "GitHub": {
       "type": "object",
       "properties": {
-        "login": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/LoginScopes"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the login flow, including the scopes that should be requested."
+          "description": "<code>false</code> if the GitHub provider should not be enabled despite the set registration; otherwise, <code>true</code>."
         },
-        "registration": {
+        "login": {
           "oneOf": [
             {
-              "$ref": "#/definitions/ClientRegistration"
+              "$ref": "#/definitions/LoginScopes"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the app registration for providers that have client ids and client secrets"
+          "description": "The configuration settings of the login flow, including the scopes that should be requested."
         },
-        "state": {
+        "registration": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/ClientRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the GitHub provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the app registration for providers that have client ids and client secrets"
         }
       },
       "description": "The configuration settings of the GitHub provider."
@@ -1733,6 +1875,20 @@
     "GlobalValidation": {
       "type": "object",
       "properties": {
+        "excludedPaths": {
+          "oneOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The paths for which unauthenticated flow would not be redirected to the login page."
+        },
         "redirectToProvider": {
           "type": "string",
           "description": "The default authentication provider to use when multiple providers are configured.\nThis setting is only needed if multiple providers are configured and the unauthenticated client\naction is set to \"RedirectToLoginPage\"."
@@ -1755,47 +1911,43 @@
           "description": "The action to take when an unauthenticated client attempts to access the app."
         }
       },
-      "description": "The configuration settings that determines the validation flow of users using ContainerApp Authentication/Authorization."
+      "description": "The configuration settings that determines the validation flow of users using ContainerApp Service Authentication/Authorization."
     },
     "Google": {
       "type": "object",
       "properties": {
-        "login": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/LoginScopes"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the login flow, including the scopes that should be requested."
+          "description": "<code>false</code> if the Google provider should not be enabled despite the set registration; otherwise, <code>true</code>."
         },
-        "registration": {
+        "login": {
           "oneOf": [
             {
-              "$ref": "#/definitions/ClientRegistration"
+              "$ref": "#/definitions/LoginScopes"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the app registration for providers that have client ids and client secrets"
+          "description": "The configuration settings of the login flow, including the scopes that should be requested."
         },
-        "state": {
+        "registration": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/ClientRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the Google provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the app registration for providers that have client ids and client secrets"
         },
         "validation": {
           "oneOf": [
@@ -1849,14 +2001,21 @@
     "HttpSettings": {
       "type": "object",
       "properties": {
+        "forwardProxy": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/ForwardProxy"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of a forward proxy used to make the requests."
+        },
         "requireHttps": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "True",
-                "False"
-              ]
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
@@ -1864,10 +2023,10 @@
           ],
           "description": "<code>false</code> if the authentication/authorization responses not having the HTTPS scheme are permissible; otherwise, <code>true</code>."
         },
-        "route": {
+        "routes": {
           "oneOf": [
             {
-              "$ref": "#/definitions/HttpSettingsRoute"
+              "$ref": "#/definitions/HttpSettingsRoutes"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
@@ -1876,9 +2035,9 @@
           "description": "The configuration settings of the paths HTTP requests."
         }
       },
-      "description": "The configuration settings of the HTTP requests for authentication and authorization requests made against ContainerApp Authentication/Authorization."
+      "description": "The configuration settings of the HTTP requests for authentication and authorization requests made against ContainerApp Service Authentication/Authorization."
     },
-    "HttpSettingsRoute": {
+    "HttpSettingsRoutes": {
       "type": "object",
       "properties": {
         "apiPrefix": {
@@ -1913,10 +2072,10 @@
           ],
           "description": "The configuration settings of the Azure Active directory provider."
         },
-        "azureStaticWebApp": {
+        "azureStaticWebApps": {
           "oneOf": [
             {
-              "$ref": "#/definitions/AzureStaticWebApp"
+              "$ref": "#/definitions/AzureStaticWebApps"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
@@ -1984,7 +2143,7 @@
           "description": "The configuration settings of the Twitter provider."
         }
       },
-      "description": "The configuration settings of each of the identity providers used to configure ContainerApp Authentication/Authorization."
+      "description": "The configuration settings of each of the identity providers used to configure ContainerApp Service Authentication/Authorization."
     },
     "Ingress": {
       "type": "object",
@@ -2070,6 +2229,40 @@
       },
       "description": "Container App Ingress configuration."
     },
+    "JwtClaimChecks": {
+      "type": "object",
+      "properties": {
+        "allowedClientApplications": {
+          "oneOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The list of the allowed client applications."
+        },
+        "allowedGroups": {
+          "oneOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The list of the allowed groups."
+        }
+      },
+      "description": "The configuration settings of the checks that should be made while validating the JWT Claims."
+    },
     "LogAnalyticsConfiguration": {
       "type": "object",
       "properties": {
@@ -2101,36 +2294,54 @@
           ],
           "description": "External URLs that can be redirected to as part of logging in or logging out of the app. Note that the query string part of the URL is ignored.\nThis is an advanced setting typically only needed by Windows Store application backends.\nNote that URLs within the current domain are always implicitly allowed."
         },
+        "cookieExpiration": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/CookieExpiration"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the session cookie's expiration."
+        },
+        "nonce": {
+          "oneOf": [
+            {
+              "$ref": "#/definitions/Nonce"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The configuration settings of the nonce used in the login flow."
+        },
         "preserveUrlFragmentsForLogins": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "True",
-                "False"
-              ]
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>True</code> if the fragments from the request are preserved after the login request is made; otherwise, <code>False</code>."
+          "description": "<code>true</code> if the fragments from the request are preserved after the login request is made; otherwise, <code>false</code>."
         },
-        "route": {
+        "routes": {
           "oneOf": [
             {
-              "$ref": "#/definitions/LoginRoute"
+              "$ref": "#/definitions/LoginRoutes"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The route that specify the endpoint used for login and logout requests."
+          "description": "The routes that specify the endpoints used for login and logout requests."
         }
       },
-      "description": "The configuration settings of the login flow of users using ContainerApp Authentication/Authorization."
+      "description": "The configuration settings of the login flow of users using ContainerApp Service Authentication/Authorization."
     },
-    "LoginRoute": {
+    "LoginRoutes": {
       "type": "object",
       "properties": {
         "logoutEndpoint": {
@@ -2138,7 +2349,7 @@
           "description": "The endpoint at which a logout request should be made."
         }
       },
-      "description": "The route that specify the endpoint used for login and logout requests."
+      "description": "The routes that specify the endpoints used for login and logout requests."
     },
     "LoginScopes": {
       "type": "object",
@@ -2386,12 +2597,47 @@
       ],
       "description": "Managed service identity (system assigned and/or user assigned identities)"
     },
+    "Nonce": {
+      "type": "object",
+      "properties": {
+        "nonceExpirationInterval": {
+          "type": "string",
+          "description": "The time after the request is made when the nonce should expire."
+        },
+        "validateNonce": {
+          "oneOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "<code>false</code> if the nonce should not be validated while completing the login flow; otherwise, <code>true</code>."
+        }
+      },
+      "description": "The configuration settings of the nonce used in the login flow."
+    },
     "OpenIdConnectClientCredential": {
       "type": "object",
       "properties": {
-        "clientSecretRefName": {
+        "clientSecretSettingName": {
           "type": "string",
           "description": "The app setting that contains the client secret for the custom Open ID Connect provider."
+        },
+        "method": {
+          "oneOf": [
+            {
+              "type": "string",
+              "enum": [
+                "ClientSecretPost"
+              ]
+            },
+            {
+              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
+            }
+          ],
+          "description": "The method that should be used to authenticate the user."
         }
       },
       "description": "The authentication client credentials of the custom Open ID Connect provider."
@@ -2772,31 +3018,27 @@
     "Twitter": {
       "type": "object",
       "properties": {
-        "registration": {
+        "enabled": {
           "oneOf": [
             {
-              "$ref": "#/definitions/TwitterRegistration"
+              "type": "boolean"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "The configuration settings of the app registration for the Twitter provider."
+          "description": "<code>false</code> if the Twitter provider should not be enabled despite the set registration; otherwise, <code>true</code>."
         },
-        "state": {
+        "registration": {
           "oneOf": [
             {
-              "type": "string",
-              "enum": [
-                "Enabled",
-                "Disabled"
-              ]
+              "$ref": "#/definitions/TwitterRegistration"
             },
             {
               "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
             }
           ],
-          "description": "<code>Disabled</code> if the Twitter provider should not be enabled despite the set registration; otherwise, <code>Enabled</code>."
+          "description": "The configuration settings of the app registration for the Twitter provider."
         }
       },
       "description": "The configuration settings of the Twitter provider."
@@ -2808,9 +3050,9 @@
           "type": "string",
           "description": "The OAuth 1.0a consumer key of the Twitter application used for sign-in.\nThis setting is required for enabling Twitter Sign-In.\nTwitter Sign-In documentation: https://dev.twitter.com/web/sign-in"
         },
-        "consumerSecretRefName": {
+        "consumerSecretSettingName": {
           "type": "string",
-          "description": "The app secret ref name that contains the OAuth 1.0a consumer secret of the Twitter\napplication used for sign-in."
+          "description": "The app setting name that contains the OAuth 1.0a consumer secret of the Twitter\napplication used for sign-in."
         }
       },
       "description": "The configuration settings of the app registration for the Twitter provider."