### On-the-Fly Checkout Configuration Example

Source: https://doc.idportal.no/docs/tenant-administration/tenant-settings/checkout-flows

This section outlines the configuration steps for the On-the-Fly Checkout flow. Users select 'ON_THE_FLY' and can optionally define role exceptions for users who should continue using the Default Checkout flow.

```text
1. Select the ON_THE_FLY option in the Checkout Flow settings.
2. Define Role Exceptions (Optional):
   * You can specify certain user roles that will still use the Default Checkout flow.
   * This is useful if, for example, administrators should bypass the cart while regular users should not.
```

--------------------------------

### Example API Request with Bearer Token

Source: https://doc.idportal.no/docs/authentication/oauth-api-authentication

This example shows how to make an authenticated API request using a Bearer token. The Authorization header must include the 'Bearer' prefix followed by the access token obtained from the /oauth/token endpoint.

```bash
curl https://api.domain.com/graphql \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..." \
  -H "Content-Type: application/json" \
  -d '{"query": "{ CredentialV1(credentialId: \"...\") { _id name } }"}'
```

--------------------------------

### Configure App Roles in Azure AD Manifest

Source: https://doc.idportal.no/docs/authentication/sso/guide-setup-external/azure-entra-id

This JSON snippet demonstrates how to define application roles within the Azure AD manifest file. These roles can be assigned to users based on their group membership, enabling role-based access control in integrated applications. Ensure 'id' is a unique GUID and 'value' matches Breeze roles.

```json
"appRoles": [
 {
   "allowedMemberTypes": [
     "User"
   ],
   "description": "Will be able to manage users in Breeze",
   "displayName": "Breeze User Administrator",
   "id": "f5726e54-b16d-483b-9847-4949c4517cfe",
   "isEnabled": true,
   "lang": null,
   "origin": "Application",
   "value": "userAdministration"
 },
 {
   "allowedMemberTypes": [
     "User"
   ],
   "description": "Will get the Admin Role in Breeze",
   "displayName": "Breeze Administrator",
   "id": "d1c2ade8-98f8-45fd-aa4a-6d06b947c661",
   "isEnabled": true,
   "lang": null,
   "origin": "Application",
   "value": "admin"
 }

]
```