" -Path createdApps.html
-
-$ErrorActionPreference = "Stop"
-Function ConfigureApplications
+<#.Description
+ This function takes a string as input and creates an instance of an Optional claim object
+#>
+Function CreateOptionalClaim([string] $name)
{
+ <#.Description
+ This function creates a new Azure AD optional claims with default and provided values
+ #>
+
+ $appClaim = New-Object Microsoft.Graph.PowerShell.Models.MicrosoftGraphOptionalClaim
+ $appClaim.AdditionalProperties = New-Object System.Collections.Generic.List[string]
+ $appClaim.Source = $null
+ $appClaim.Essential = $false
+ $appClaim.Name = $name
+ return $appClaim
+}
+
<#.Description
- This function creates the Azure AD applications for the sample in the provided Azure AD tenant and updates the
- configuration files in the client and service project of the visual studio solution (App.Config and Web.Config)
- so that they are consistent with the Applications parameters
+ Primary entry method to create and configure app registrations
#>
- $commonendpoint = "common"
+Function ConfigureApplications
+{
+ $isOpenSSl = 'N' #temporary disable open certificate creation
+
+ <#.Description
+ This function creates the Azure AD applications for the sample in the provided Azure AD tenant and updates the
+ configuration files in the client and service project of the visual studio solution (App.Config and Web.Config)
+ so that they are consistent with the Applications parameters
+ #>
if (!$azureEnvironmentName)
{
- $azureEnvironmentName = "AzureCloud"
+ $azureEnvironmentName = "Global"
}
- # $tenantId is the Active Directory Tenant. This is a GUID which represents the "Directory ID" of the AzureAD tenant
- # into which you want to create the apps. Look it up in the Azure portal in the "Properties" of the Azure AD.
-
- # Login to Azure PowerShell (interactive if credentials are not already provided:
- # you'll need to sign-in with creds enabling your to create apps in the tenant)
- if (!$Credential -and $TenantId)
- {
- $creds = Connect-AzureAD -TenantId $tenantId -AzureEnvironmentName $azureEnvironmentName
+ # Connect to the Microsoft Graph API, non-interactive is not supported for the moment (Oct 2021)
+ Write-Host "Connecting to Microsoft Graph"
+ if ($tenantId -eq "") {
+ Connect-MgGraph -Scopes "User.Read.All Organization.Read.All Application.ReadWrite.All" -Environment $azureEnvironmentName
}
- else
- {
- if (!$TenantId)
- {
- $creds = Connect-AzureAD -Credential $Credential -AzureEnvironmentName $azureEnvironmentName
- }
- else
- {
- $creds = Connect-AzureAD -TenantId $tenantId -Credential $Credential -AzureEnvironmentName $azureEnvironmentName
- }
+ else {
+ Connect-MgGraph -TenantId $tenantId -Scopes "User.Read.All Organization.Read.All Application.ReadWrite.All" -Environment $azureEnvironmentName
}
+
+ $context = Get-MgContext
+ $tenantId = $context.TenantId
- if (!$tenantId)
- {
- $tenantId = $creds.Tenant.Id
- }
+ # Get the user running the script
+ $currentUserPrincipalName = $context.Account
+ $user = Get-MgUser -Filter "UserPrincipalName eq '$($context.Account)'"
+ # get the tenant we signed in to
+ $Tenant = Get-MgOrganization
+ $tenantName = $Tenant.DisplayName
+ $verifiedDomain = $Tenant.VerifiedDomains | where {$_.Isdefault -eq $true}
+ $verifiedDomainName = $verifiedDomain.Name
+ $tenantId = $Tenant.Id
- $tenant = Get-AzureADTenantDetail
- $tenantName = ($tenant.VerifiedDomains | Where { $_._Default -eq $True }).Name
-
- # Get the user running the script to add the user as the app owner
- $user = Get-AzureADUser -ObjectId $creds.Account.Id
+ Write-Host ("Connected to Tenant {0} ({1}) as account '{2}'. Domain is '{3}'" -f $Tenant.DisplayName, $Tenant.Id, $currentUserPrincipalName, $verifiedDomainName)
- # Create the spa AAD application
+ # Create the client AAD application
Write-Host "Creating the AAD application (ms-identity-javascript-c1s1)"
# create the application
- $spaAadApplication = New-AzureADApplication -DisplayName "ms-identity-javascript-c1s1" `
- -HomePage "http://localhost:3000" `
- -ReplyUrls "http://localhost:3000" `
- -IdentifierUris "https://$tenantName/ms-identity-javascript-c1s1" `
- -PublicClient $False
-
- # create the service principal of the newly created application
- $currentAppId = $spaAadApplication.AppId
- $spaServicePrincipal = New-AzureADServicePrincipal -AppId $currentAppId -Tags {WindowsAzureActiveDirectoryIntegratedApp}
-
- # add the user running the script as an app owner if needed
- $owner = Get-AzureADApplicationOwner -ObjectId $spaAadApplication.ObjectId
- if ($owner -eq $null)
- {
- Add-AzureADApplicationOwner -ObjectId $spaAadApplication.ObjectId -RefObjectId $user.ObjectId
- Write-Host "'$($user.UserPrincipalName)' added as an application owner to app '$($spaServicePrincipal.DisplayName)'"
- }
-
-
- Write-Host "Done creating the spa application (ms-identity-javascript-c1s1)"
-
- # URL of the AAD application in the Azure portal
- # Future? $spaPortalUrl = "https://portal.azure.com/#@"+$tenantName+"/blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Overview/appId/"+$spaAadApplication.AppId+"/objectId/"+$spaAadApplication.ObjectId+"/isMSAApp/"
- $spaPortalUrl = "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/CallAnAPI/appId/"+$spaAadApplication.AppId+"/objectId/"+$spaAadApplication.ObjectId+"/isMSAApp/"
- Add-Content -Value "| spa | $currentAppId | ms-identity-javascript-c1s1 |
" -Path createdApps.html
-
-
- # Update config file for 'spa'
- $configFile = $pwd.Path + "\..\App\authConfig.js"
- Write-Host "Updating the sample code ($configFile)"
- $dictionary = @{ "Enter_the_Application_Id_Here" = $spaAadApplication.AppId; "Enter_the_Tenant_Info_Here" = $tenantId; "Enter_the_Redirect_Uri_Here" = $spaAadApplication.ReplyUrls };
- ReplaceInTextFile -configFilePath $configFile -dictionary $dictionary
- Write-Host ""
- Write-Host -ForegroundColor Green "------------------------------------------------------------------------------------------------"
- Write-Host "IMPORTANT: Please follow the instructions below to complete a few manual step(s) in the Azure portal":
- Write-Host "- For 'spa'"
- Write-Host " - Navigate to '$spaPortalUrl'"
- Write-Host " - Navigate to the Manifest page, find the entry for 'replyUrlsWithType' and change the value to 'Spa'" -ForegroundColor Red
-
- Write-Host -ForegroundColor Green "------------------------------------------------------------------------------------------------"
-
- Add-Content -Value "