169
questions
0
votes
0
answers
11
views
Issue with Power BI Embedded API and 401 Unauthorized Error
I'm working on integrating Power BI Embedded using the REST API to retrieve the list of dashboards. I'm using client credentials flow with the correct client ID and client secret to obtain an access ...
-1
votes
1
answer
72
views
Unable to define the sites for an App Registration for SahrePoint with Site.Selected
I have this App registration inside Azure with Site.Selected for SharePoint online:-
I want to define the sites for the above "Sites.Selected", so I tried the following:-
$siteUrl = "...
0
votes
0
answers
25
views
how to monitor Azure app registration with Checkmk
I want to monitor Azure app registration for secrets and certificates with Check-mk and I found these in checkmk site https://checkmk.com/integrations/azure_app_registration and https://checkmk.com/...
0
votes
1
answer
1k
views
AADSTS700016: Application with identifier 'XXX' was not found in the directory 'directory_name'
Our application is up and running, but suddenly we encountered an issue when viewing documents from OneDrive through our application. We are receiving the following error:
"Application with ...
0
votes
0
answers
39
views
Audit user accessing SPN
I'm in a Hybrid Entra ID environment.
Some users can use an "App registration" by utilizing IDs and a certificate.
In the activity or sign-in logs, I can find the access entries, but I don't ...
0
votes
1
answer
63
views
How can I restrict an app to call GET /applications endpoints to list only applications which is OwnedBy this app
How Can I restrict an app to call GET /applications endpoints to list only applications which is OwnedBy this app?
E.g. I have Masterapp called "prd-masterapp" which is being used to create ...
1
vote
0
answers
33
views
Can I publish a SaaS Offer for FileHandler App registration? [closed]
Recently I have researched to develop FileHandler Add-In in App registration.
I want to publish a SaaS offering to the marketplace (App Source) for my app registration. Or at least we can publish it ...
0
votes
1
answer
55
views
Updating App Registration's Configured permission without overwritten existing values
I'm trying to update the "Configured permissions" of a given App Registration (Target App), with a permission offered by another App Registration (Source App). Source App exposes an API ...
0
votes
1
answer
35
views
How do we test multi-tenant Teams apps?
I've written a Teams SaaS app using the teams toolkit and as you know, it's tied to the test tenant of your developer account. So that's how I've been developing it and debugging it etc.
But it's not ...
0
votes
1
answer
62
views
IS there a way to update expired client secret for Enterprise Application in Azure Portal
I have an application registered in the Azure Portal that has been converted into an Enterprise application. The client secret for this application has expired, and I need to update it. However, since ...
0
votes
1
answer
104
views
Microsoft Entra ID - User Concent Screen
I've been playing around with OAuth 2.0 using Microsoft Entra ID and wanted to find out why I'm seeing two consent screens.
Background:
I've created TWO app registrations:
One for a SPA frontend - ...
0
votes
0
answers
29
views
The created FileHandler does not appear in OneDrive and SharePoint
I tried to develop a file handler for my OneDrive and SharePoint environment. I followed the document below :
https://learn.microsoft.com/en-us/onedrive/developer/file-handlers/?view=odsp-graph-online
...
0
votes
1
answer
72
views
How can I find all Azure app registrations with API permissions to a specific app registration?
I have an app registration in Azure that exposes an API (let's say the app id is 00000000-0000-0000-0000-000000000001)
There are many app registrations in our tenant that have been granted access to ...
0
votes
1
answer
66
views
How to grant all users of a CLI application with `DeviceCodeCredential` access to resources granted to the application?
I'm writing a CLI application for our developers to use for administrative tasks. The intention is for the CLI to pull in secrets etc. from an Azure Key Vault using the Key Vault SDK. Given that it's ...
0
votes
1
answer
43
views
PATCH appRoles to existing Entra Application using PowerShell Invoke-RestMethod
I am creating BICEP resources for an automated DevOps Pipeline which automates the creation of App Registrations within Microsofts EntraID. The BICEP is using a Microsoft.Resources/deploymentScripts@...
0
votes
1
answer
206
views
Trusted Signing Integration In Azure Pipelines fails (403 Forbidden, code 0x80004005)
I am receiving a 403 [Error: SignerSign() failed." (-2147467259/0x80004005)]when attempting to to a signing on an exe using the TrustedSigning@0 task in Azure Pipelines.
I can confirm the ...
0
votes
1
answer
104
views
How can i confiure Azure App Registration redirect to requested Url?
I have an Azure Static WebApp that is configured with AAD Authentication through an Azure App Registration.
Only members from my organization should be able to view the site.
My staticwebapp.config....
0
votes
1
answer
296
views
Grant admin consent for app registration API permission
i create a new app registration via MgGraph Powershell Module, for example:
$appName = "Test"
$APIResourceID = "00000003-0000-0000-c000-000000000000"
$APIResourceAccess = @{
...
0
votes
1
answer
91
views
Graph API returns 0 drives for a SharePoint Team Site, on which there is a shared folder and its subfolders with files
Context
I have an Entra ID user "myuser", who can successfully browse list and view folders and files on a SharePoint Team Site called "mysite" using a browser
I have an ASP.NET ...
0
votes
0
answers
51
views
Azure WebAPI Authorization
I have a web API, which exposes some endpoints. I have deployed my application in Azure container App's env. and trying to authorize it with MS Entra ID. My client application is a service. as per MS ...
0
votes
1
answer
236
views
Eliminating client secret from app registration
I am facing critical issue for app registration in azure, please consider following scenario.
I have one app registration which contains a client secret. We use this app registration to generate ...
0
votes
1
answer
233
views
Error AADSTS9002326: Cross-origin token redemption issue when sending data from Angular
I have an Angular application running locally that needs to send data to an Azure Log Analytics Workspace. When I make the API call using Postman, it works perfectly fine. However, when I attempt to ...
0
votes
0
answers
55
views
In Azure Function, using PowerShell, how do I respond to a validation request when creating a subscription to a SharePoint list?
We are using the Azure App Registration as a security principle, used to get the bearer token when making api requests in Postman.
API permissions we have:
Sites.FullControl.All
Sites.Manage.All
Sites....
0
votes
2
answers
94
views
Azure React WebApp Showing PKCE issue
Getting issue PKCE(Proof Key for Code Exchange is required for cross-origin authorization code redemption.)
I have react webApp deployed on Azure WebApp , the platform there is SPA
I added the ...
0
votes
1
answer
379
views
How to connect Power BI to Microsoft 365 admin center
I was reading this amazing piece of documentation:
https://learn.microsoft.com/en-us/office/office-365-management-api/get-started-with-office-365-management-apis
My goal is to try to access the ...
0
votes
1
answer
425
views
How do I create a new Azure app registration and add a scope via PowerShell?
I am trying to create the following using PowerShell:
Signs into Entra ID (prompts them in a pop up to sign in, so they can use MFA etc interactively).
Create a new application registration called &...
0
votes
1
answer
369
views
In Entra ID OpenID token, which I get using an Azure App registration, what is "oid" claim in the resulting access token, and where it comes from?
I have an App Registration in Azure:
Application (client) ID: aeb***f61
Object ID: f3f***1d9
Directory (tenant) ID: 937***7d1
I am prototyping a client using Postman. I can get the token successfully ...
0
votes
2
answers
628
views
Client secret expiry-"Azure Container Registry" Type of Service Connection in Azure DevOps
I am trying to create a new Service Connection for using in my pipeline in Azure DevOps using the GUI with
Container Registry type but the corresponding service principal client secret has an ...
0
votes
1
answer
172
views
Azure app registration limit access for client secret/certificate
I'm developing an API that will be used by other application and I'm using Microsoft Identify platform. The API exposes several end-points and one application will use all end-points, while the other ...
0
votes
1
answer
113
views
Implementing Incremental consent when using both application and delegated permissions
I have an application permission like TeamsAppInstallation.ReadWriteSelfForUser.All.
I also have some delegated permissions.
I want an admin to allow a small set of permissions including the ...
-1
votes
2
answers
131
views
Is it safe to integrate with SharePoint online API through a console application which is hosted on local VM
I have the below console application, which integrates with SharePoint Online. the console application is hosted on a local VM and authenticates with SharePoint using ClientId, TenantID & ...
1
vote
1
answer
291
views
Entra authentication without storing secrets or certificate information in client code [closed]
I have a WPF app that collects secrets from an Azure Vault. I have created an App Registration in Azure that has access to my vault. In order to get a vault token I need to either store the app reg ...
0
votes
1
answer
441
views
DefaultAzureCredential() not working with app registration and Environment variables
I have an azure function.
To access a key vault it uses a managedIdentity when running in the cloud but when running locally I am trying to use a service principal.
var credential = new ...
0
votes
1
answer
96
views
Prevent app registration creating storage account container or delete blobs
I have been writing C# application where using client ID and client secret, I am trying to upload a blob to specific container on storage account.
Requriement is client should only be able to upload ...
0
votes
1
answer
180
views
How to Test IAM Roles for an App Registration
I'm troubleshooting an issue where an app registration is unable to query the subscriptions within an Azure tenant, despite a role assignment granting it access at the tenant root group level. ...
0
votes
1
answer
81
views
Not Found (404): Resource 'guidOfMyManagedIdentityServicePrincipal' does not exist or one of its queried reference-property objects are not present
I created an Azure function and enabled the managed identity option. It creates a new Enterprise application with a unique guid. I would like to add this managed identity as an owner of a specific AAD ...
0
votes
1
answer
43
views
Prevent user login to Azure App Registration
I am writing a server side application that will run on an internal server (a physical box, not inside Azure). The application needs access to a blob storage container. The data in the blob storage is ...
0
votes
1
answer
241
views
Azure App registration using user+app access vs app-only access
I am developing an azure web app service called emailservice, which is supposed to communicate to a mailbox created in office365 exchange online. Suppose the user account for the mailbox is x @y-...
0
votes
1
answer
95
views
Azure app registration apps list- access needed
I need to access all the list of apps whose tokens are nearly expiring (say due in 7 days). What privileges do I need inorder to fetch that using python script?
I have already given Directory.Read.ALL ...
1
vote
1
answer
662
views
How can I Create App registration and Add Permissions in Microsoft Entra ID using C# code
I have developed a web application that successfully executes PowerShell scripts on my local machine. However, upon deploying the application to Azure App Service, I encountered errors indicating that ...
1
vote
1
answer
64
views
Microsoft Graph Permissions overlaps
I'm trying to understand Microsoft Graph Permissions (The ones you add to an App Registration) and have encountered some overlaps and hierarchical relationships among them. However, I'm struggling to ...
-3
votes
1
answer
216
views
Add/Edit/Remove users in Microsoft Entra App from a web application
Background: we have a web application built on ASP.NET Core MVC hosted in an Azure App Service configured for Azure single sign-on. This app has a page which manages users (add / remove / change role)....
2
votes
1
answer
434
views
How to Update Update manifest of AAD app via Az module PowerShell script or C# code
I am new to Microsoft Entra id and trying to create App register using Az module powerhsell script and also wants to update its manifest file with below
"trustedCertificateSubjects": [
{
...
0
votes
1
answer
165
views
How to add individual Owners to AAD app register using AZ module powershell script
Unable to add owners into AAD app register using Az module powershell script
Using Below Script to add users on app.
$appName = "Sampleapp"
$ownerEmail = "[email protected]"
$app = ...
0
votes
1
answer
155
views
LogicApps: MSGraph API Read Shared Mailbox Only
My goal is to use the msgraph api via logic apps to query a shared mailbox and return the result for a keyword in the subject line.
Above is what i currently have written.
I would like to know if ...
1
vote
1
answer
136
views
Exposed App not Visible for adding in Azure App Permissions
I have registered an App in Azure and exposed the App with Custom Scope.
I have registered one more app and when I am trying to add in API permissions the exposed API custom scope I am not bale to ...
0
votes
1
answer
519
views
Unable to acquire token using client certificate authentication in Python
To obtain a token with client secret authentication, we followed these steps:
Registered an application in the Azure portal and got the client ID and client secret.
Added Microsoft Graph permissions ...
3
votes
1
answer
657
views
User not allowed by policy conditions - Entra External ID for customers
I am using External ID for my customer tenant, authenticating via an Angular SPA.
My setup is identical to what is described in this article: https://learn.microsoft.com/en-us/entra/external-id/...
0
votes
1
answer
367
views
MVC with Azure Entra ID Authentication
I have just created a new MVC project and created an App Registration in Azure. Below is my code that I currently have:
Startup.cs
public class Startup
{
public IConfiguration Configuration { get; ...
0
votes
0
answers
159
views
Why is Access token from app registration encrypted when requesting openid scope?
For a SPA/ mobile app I've set up a login using an app registration in Azure. The login works perfectly fine, but when I request the openid scope (which is also set in the app registration), I get an (...