- Using https://github.com/manicminer/hamilton
- Supports service principal authentication via client certificate or client secret
- Configures an Authorizer struct for acquiring access tokens using MSID v2.0
- Currently only works for https://graph.microsoft.com (i.e. not other clouds)

…ta, use in azuread_client_config to retrieve authenticated object ID

- We haven't hit this with AAD Graph because it continues to report
  resources exist long after they're gone

…agent

- Except for azuread_application_password because MS Graph no longer
  supports user-supplied password values.
- This needs further investigation. We may need to drop the `value`
  attribute in v2.0

- Except for azuread_service_principal_password because MS Graph no longer
  supports user-supplied password values.
- This needs further investigation. We may need to drop the `value`
  attribute in v2.0

Co-authored-by: Tom Harvey <tombuildsstuff@users.noreply.github.com>

- Use `use_microsoft_graph` for provider toggle attribute
- Handle a nil AuthConfig
- Document `public` environment (former name for `global`)
- Logging user agent string is a bit spammy, stop doing that

- Better error handling
- Crash mitigation
- More reasoned flatten functions
- Use timeout from context for WaitForState functions

… plan time

…tions and Groups

…emains to use CLI auth)

- Ensure correct handling of all new attributes/properties
- Always set optional_claims block when not empty
- Use `is_enabled` for deprecated `oauth2_permissions` and `enabled` for new `oauth2_permission_scopes`
- Add new attributes to azuread_application data source
- Remove certificates and password from state when parent application is gone
- Test coverage for new and deprecated properties
- Differentiate error messages
- More error handling

- Address review for v2.0 upgrade guide
- Update documentation for application related resources/data sources
- Improve validation for new application properties

…resource

…cipals

- Document new fields and deprecations
- Improve test coverage for azuread_service_principal
- oauth2_permissions -> oauth2_permission_scopes deprecation for service
  principal resource and data source

…_principal_password

…ice_principal_password

For both resources:

- Since `value` is to be removed, generate a value for AAD Graph if one
  is not specified in configuration, mimicking characteristics of
  msgraph-generated passwords
- As `end_date` / `end_date_relative` are also being removed, default
  `end_date_relative` to 17520h (2 years) which mimics MS Graph

…rmission_scope