Merge pull request #5206 from jdlagace/AADCustomSecurityAttributeDefi…

…nition Added support for ApplicationSecret
microsoft · Oct 21, 2024 · 3f5156f · 3f5156f
2 parents 5538c1d + 22ba297
commit 3f5156f
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/.../MSFT_AADCustomSecurityAttributeDefinition/MSFT_AADCustomSecurityAttributeDefinition.psm1 b/.../MSFT_AADCustomSecurityAttributeDefinition/MSFT_AADCustomSecurityAttributeDefinition.psm1
@@ -57,6 +57,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -132,6 +136,7 @@ function Get-TargetResource
             Credential              = $Credential
             ApplicationId           = $ApplicationId
             TenantId                = $TenantId
+            ApplicationSecret       = $ApplicationSecret
             CertificateThumbprint   = $CertificateThumbprint
             ManagedIdentity         = $ManagedIdentity.IsPresent
             AccessTokens            = $AccessTokens
@@ -209,6 +214,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -325,6 +334,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -447,6 +460,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...AADCustomSecurityAttributeDefinition/MSFT_AADCustomSecurityAttributeDefinition.schema.mof b/...AADCustomSecurityAttributeDefinition/MSFT_AADCustomSecurityAttributeDefinition.schema.mof
@@ -10,11 +10,11 @@ class MSFT_AADCustomSecurityAttributeDefinition : OMI_BaseResource
     [Write, Description("Specifies whether the custom security attribute is active or deactivated. Acceptable values are Available and Deprecated. Can be changed later.")] String Status;
     [Write, Description("Data type for the custom security attribute values. Supported types are: Boolean, Integer, and String. Can't be changed later.")] String Type;
     [Write, Description("Indicates whether only predefined values can be assigned to the custom security attribute. If set to false, free-form values are allowed. Can later be changed from true to false, but can't be changed from false to true. If type is set to Boolean, usePreDefinedValuesOnly can't be set to true.")] Boolean UsePreDefinedValuesOnly;
-
     [Write, Description("Present ensures the instance exists, absent ensures it is removed."), ValueMap{"Absent","Present"}, Values{"Absent","Present"}] string Ensure;
     [Write, Description("Credentials of the workload's Admin"), EmbeddedInstance("MSFT_Credential")] string Credential;
     [Write, Description("Id of the Azure Active Directory application to authenticate with.")] String ApplicationId;
     [Write, Description("Id of the Azure Active Directory tenant used for authentication.")] String TenantId;
+    [Write, Description("Secret of the Azure Active Directory tenant used for authentication."), EmbeddedInstance("MSFT_Credential")] String ApplicationSecret;
     [Write, Description("Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.")] String CertificateThumbprint;
     [Write, Description("Managed ID being used for authentication.")] Boolean ManagedIdentity;
     [Write, Description("Access token used for authentication.")] String AccessTokens[];