oAuth Archives - darrenjrobinson - Bespoke Identity and Access Management Solutions

September 30, 2021September 30, 2021

Interactive Authentication to Microsoft Graph using MSAL with PowerShell and Delegated Permissions

<img width="640" height="291" alt="" data-srcset="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?w=640&ssl=1 640w, https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=300%2C136&ssl=1 300w" data-src="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=640%2C291&ssl=1" data-sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image lazyload" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" /><noscript><img width="640" height="291" src="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=640%2C291&ssl=1" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image" alt="" srcset="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?w=640&ssl=1 640w, https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=300%2C136&ssl=1 300w" sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" />

Previously I’ve written about using MSAL and PowerShell with Application Permissions and Client Credentials and Certificate based authentication. Also with Delegated Permissions and Device Code flow authentication. The one I haven’t written a post on is performing interactive authentication to Microsoft Graph using MSAL with PowerShell and Delegated Permissions.… keep reading

July 14, 2020November 10, 2020

Microsoft Graph using MSAL with PowerShell and Certificate Authentication

<img width="640" height="291" src="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-Certificate-Authentication-with-PowerShell-and-Application-Permissions-640px.png?resize=640%2C291&ssl=1" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image" alt="" srcset="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-Certificate-Authentication-with-PowerShell-and-Application-Permissions-640px.png?w=640&ssl=1 640w, https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-Certificate-Authentication-with-PowerShell-and-Application-Permissions-640px.png?resize=300%2C136&ssl=1 300w" sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" />

Close to 3 years ago I authored this post on using PowerShell for Certificate based Azure AD Authentication using ADAL (Active Directory Authentication Library). More recently I’ve published posts on using MSAL (MicroSoft Authentication Library) with PowerShell for Application and Delegated integration with the Microsoft Graph.… keep reading

July 9, 2020July 15, 2020

Microsoft Graph using MSAL with PowerShell and Delegated Permissions

<img width="640" height="291" alt="" data-srcset="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?w=640&ssl=1 640w, https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=300%2C136&ssl=1 300w" data-src="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=640%2C291&ssl=1" data-sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image lazyload" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" /><noscript><img width="640" height="291" src="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=640%2C291&ssl=1" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image" alt="" srcset="https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?w=640&ssl=1 640w, https://i2.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2020/07/Microsoft-Graph-using-MSAL-with-PowerShell-and-Delegated-Permissions-640px.png?resize=300%2C136&ssl=1 300w" sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" />

In October last year I authored this post that provided a getting started guide to using MSAL with PowerShell. That post also hinted at future posts expanding on additional functionality. Finally, I’m delivering on that with this post that will dive into using MSAL with PowerShell and delegated permissions.… keep reading

October 30, 2019March 28, 2021

Microsoft Graph using MSAL with PowerShell

Access Token via decode in PowerShell with JWTDetails

<img width="640" height="293" src="https://i0.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2019/10/Access-Token-via-decode-in-PowerShell-with-JWTDetails-640px.png?resize=640%2C293&ssl=1" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image" alt="Access Token via decode in PowerShell with JWTDetails" srcset="https://i0.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2019/10/Access-Token-via-decode-in-PowerShell-with-JWTDetails-640px.png?w=640&ssl=1 640w, https://i0.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2019/10/Access-Token-via-decode-in-PowerShell-with-JWTDetails-640px.png?resize=300%2C137&ssl=1 300w" sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" />

Update 9 July 2020: This post details using MSAL with
PowerShell for Azure AD Registered Applications with
Application Permissions. 
See this post for using MSAL with PowerShell for
Azure AD Registered Applications with Delegated
Permissions.

See this post for using MSAL with PowerShell for
Azure AD Registered Applications using Application
Permissions with Certificate based authentication.

… keep reading

July 31, 2019September 7, 2020

JWTDetails PowerShell Module for Decoding JWT Access Tokens with readable Token Expiry Time

<img width="691" height="288" src="https://i0.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2019/07/JWTDetails.png?resize=691%2C288&ssl=1" class="attachment-twentyseventeen-featured-image size-twentyseventeen-featured-image wp-post-image" alt="" srcset="https://i0.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2019/07/JWTDetails.png?w=691&ssl=1 691w, https://i0.wp.com/blog.darrenjrobinson.com/wp-content/uploads/2019/07/JWTDetails.png?resize=300%2C125&ssl=1 300w" sizes="(max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px" />

Updated: 15 June 2020 – JWTDetails updated to v1.0.2

Fixes issue related to time zones with 30min offsets
Code Signed

I’ve just published my first PowerShell Module to the PowerShell Gallery. The JWTDetails PowerShell Module contains the Get-JWTDetails cmdlet that decodes a JWT Access Token and converts it to a PowerShell Object.… keep reading

December 20, 2018October 6, 2019

Azure Self Service Password Reset Reporting using PowerShell

Just over 18 months ago I wrote this post on using PowerShell and oAuth to access the Azure AD Reports API to retrieve MIM Hybrid Report data. This week I went to re-use that for Azure Password Reset Reporting and found out that the API had been deprecated.… keep reading