Proof Key for Code Exchange (PKCE) is a mechanism often used with an OAuth2 Authorization Code Grant flow to provide an enhanced level of security when authenticating to an Identity Provider such as Microsoft Graph to get an access token. In order to use PKCE a code_verifier is generated along with a code_challenge.… keep reading
Microsoft Graph Permission Scope IDs
Registering Microsoft Graph applications using the Azure Portal and assigning API Permissions is trivial. When you are automating that process though rather than choosing API permissions using the Azure Portal Application Registration UI, you need to know the Microsoft Graph Permission Scope IDs.… keep reading
What does your Azure AD FIDO2 Passwordless Credential look like?
I’m curious. I often think, how does that work? Or why does it behave like that? We are well into the journey towards Passwordless adoption and I’ve spoken and posted about aspects of it before. Always a good place to start are the standards.… keep reading
Interactive Authentication to Microsoft Graph using MSAL with PowerShell and Delegated Permissions
Previously I’ve written about using MSAL and PowerShell with Application Permissions and Client Credentials and Certificate based authentication. Also with Delegated Permissions and Device Code flow authentication. The one I haven’t written a post on is performing interactive authentication to Microsoft Graph using MSAL with PowerShell and Delegated Permissions.… keep reading
Updating .NET Interactive
I’ve been using Jupyter Notebook with PowerShell since the early releases of of the Public Preview of PowerShell Support in Jupyter Notebooks in March 2020. I’ve written about how to use PowerShell Jupyter Notebook with Docker and Binder and even enabling C#, F# & PowerShell .NET… keep reading
Get Certificates from a YubiKey using PowerShell
Last week Yubico announced the general availability of their desktop .NET SDK for YubiKeys. I jumped over to their GitHub repo to check out what functionality the .NET SDK exposed. The good news is that the Personal Identity Verification (PIV) slots used for certificates are accessible.… keep reading
DevOps for SailPoint IdentityNow with PowerShell
This is the accompanying blogpost for my SailPoint Navigate Developer presentation DevOps for SailPoint IdentityNow with PowerShell from August 19 2021. If you are registered you can go direct to the presentation with this link.
A summary of what I showed in the demonstration is below.… keep reading
Azure AD User Account Federation Report
Which Azure AD Tenants is my user account federated too? More specifically, in which Azure Active Directory Tenants do I have an Azure Active Directory B2B Guest Account? Is there a way I can quickly get an Azure AD User Account Federation Report?… keep reading
[error 0x800700c1 when launching `C:\Program Files\PowerShell\7\pwsh.exe’]
I’ve recently upgraded to the latest Windows Terminal version (1.8.1521.0). Today after a well overdue restart of my computer, opening Windows Terminal with PowerShell configured as my default profile presented me with [error 0x800700c1 when launching `C:\Program Files\PowerShell\7\pwsh.exe’].
Some quick searching to see if this was common turned up this old issue in the Windows Terminal GitHub Repo issues list.… keep reading
Release 1.1.4 SailPoint IdentityNow PowerShell Module
UPDATE 13 July 2021: v1.1.5 is now available with a few enhancements and bug fixes.
I’ve just published v1.1.4 of the SailPoint IdentityNow PowerShell Module to both GitHub and the PowerShell Gallery. Release 1.1.4 of the SailPoint IdentityNow PowerShell Module is the result of considerable effort by myself and Sean McGovern.… keep reading