Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Client cert authentication flow #90

Merged
merged 3 commits into from
Sep 4, 2023
Merged

Conversation

apcsb
Copy link
Contributor

@apcsb apcsb commented Apr 7, 2023

Added a client cert authentication flow to Connect-MSIntuneGraph via a clientCert parameter set. Much safer than Client Secret and follows best practices.

@CodyRWhite
Copy link

Just to note, it might be worth making a note in the documentation if this pull is approved.

MSAL.PS does not support all certificates. I attempted to set this up in our environment and we had to create non-CNG certificates for MSAL.PS to work. It has something to do with the version of .Net the module was written in. If you are OK creating non-CNG this change will work. We don't want more issues coming to this repository for an issue that belongs upstream.

Please reference AzureAD/MSAL.PS#67
Ignore the users 2nd comment related to teams. The OP is the error you will see with non-CNG certificates.

@NickolajA
Copy link
Member

Thank you for creating this PR! It's been on my todo-list, but I've not really prioritized it yet, so thank you. I'll merge this now :)

@NickolajA NickolajA merged commit 01b1fc3 into MSEndpointMgr:master Sep 4, 2023
@NickolajA NickolajA self-assigned this Sep 4, 2023
@NickolajA NickolajA added the 1.4.2 label Sep 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: Completed
Development

Successfully merging this pull request may close these issues.

3 participants