Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set-SsoAuthenticationPolicy: Certificate Revocation "Disabled" Option? #602

Open
ttierno2 opened this issue Feb 6, 2023 · 0 comments
Open

Comments

@ttierno2
Copy link

ttierno2 commented Feb 6, 2023

Is your feature request related to a problem? Please describe.

The functions in the AuthenticationPolicy.ps1 do work for me, however when I run the command as such:

Get-SsoAuthenticationPolicy | Set-SsoAuthenticationPolicy -SmartCardAuthnEnabled $true -OCSPEnabled $false -UseInCertCRL $false -SendOCSPNonce $false -UseCRLAsFailOver $false -TrustedCAs $Cert_String**

I end up with an 'Unknown' entry under Certificate Revocation (picture attached)
Rev_Unknown

You can see when I dig further that no option is selected here after running that command (picture attached)
No_Rev_Op

I don't see a way to set 'Certificate revocation' to disabled.

**(I populate the $Cert_String variable properly)

Describe the solution you'd like

A 'Disabled' parameter here, instead of specifying OCSP and/or CRL options, that would set the 'Certificate revocation' to disabled would be extremely helpful.

Describe alternatives you've considered

No response

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant