We are trying to implement SAML authentication with React App where we are using Azure Directory as IDP, when the user gets authenticated UI gets SAML response in HTTP post request payload. But on the client-side (React) we are not…
Have created a custom PowerShell script to export all of my azure registered apps API application permissions and delegated permissions. Some of my apps have either API permissions of Type equal to delegated or application. I followed the step by…
I get the error Login failed for user ''. (Microsoft SQL Server, Error: 18456) from Azure SQL server when a user tries to login using Azure Active Directory - Universal with MFA. My Azure AD login is within a group,…
I've configured a custom policy with AAD B2C IEF per this link and am now trying to integrate it into API Gateway as a JWT authorizer per this link. However, attempting to configure the authorizer throws an error error updating…
There are different type of contributor roles in Azure. If I'm giving "contributor" role at resource group level, and that resouce group has SQL Server, Storage and other resources as well. Is it that, someone having "contributor" role to the…
For these cmdlets below, I try to create the function with the [CmdletBinding(SupportsShouldProcess)] line, but not sure that it will work. Using: https://learn.microsoft.com/en-us/powershell/module/msonline/set-msoluserlicense?view=azureadps-1.0 How can the script be modified to support the -WhatIf parameter? function Remove-License { [CmdletBinding(SupportsShouldProcess)] param ([String]…
Background: I am trying to setup my azure infrastructure to deploy my new web app. I am working with an external contractor cloud engineer and I only want her to be able to setup my cloud infrastructure. Steps: I have…
Is there any Azure policy can be in place which will restict users so that they Can NOT delete any of the Security groups in Azure? even if they can PIM up below roles: User Admin Privileged auth admin Application…
From Azure AD, Are there any ways to find users who does not have a speciifc group assigned ( the name contain %AVD% in it) ? This is what I have tried: https://graph.microsoft.com/beta/users?$expand=memberOf https://graph.microsoft.com/v1.0/users/groups?$search="AVD" https://graph.microsoft.com/v1.0/users?$select=memberOf eq '%AVD%' unable to get…
(first of all, sorry if my english is a little all over the place, still learning) So i was hoping someone had any input on how to do this. Right now im working at a tenant that has mutiple companies…