Merge pull request #5437 from jdlagace/AAD_AppSecretSupport

AAD - Added ApplicationSecret auth method to multiple resources
microsoft · Nov 22, 2024 · ed9988c · ed9988c
2 parents 3be30c2 + 2be84c3
commit ed9988c
Show file tree

Hide file tree

Showing 29 changed files with 197 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 # UNRELEASED
 
+* AAD
+  * Added ApplicationSecret auth method to multiple resources
 * MISC
   * Removed hardcoded Graph urls and replaced by MSCloudLoginAssistant values.
 

diff --git a/...s/Microsoft365DSC/DSCResources/MSFT_AADAccessReviewPolicy/MSFT_AADAccessReviewPolicy.psm1 b/...s/Microsoft365DSC/DSCResources/MSFT_AADAccessReviewPolicy/MSFT_AADAccessReviewPolicy.psm1
@@ -24,6 +24,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -67,6 +71,7 @@ function Get-TargetResource
             Credential                    = $Credential
             ApplicationId                 = $ApplicationId
             TenantId                      = $TenantId
+            ApplicationSecret             = $ApplicationSecret
             CertificateThumbprint         = $CertificateThumbprint
             ManagedIdentity               = $ManagedIdentity.IsPresent
             AccessTokens                  = $AccessTokens
@@ -111,6 +116,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -171,6 +180,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -291,6 +304,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...osoft365DSC/DSCResources/MSFT_AADAccessReviewPolicy/MSFT_AADAccessReviewPolicy.schema.mof b/...osoft365DSC/DSCResources/MSFT_AADAccessReviewPolicy/MSFT_AADAccessReviewPolicy.schema.mof
diff --git a/...esources/MSFT_AADCustomAuthenticationExtension/MSFT_AADCustomAuthenticationExtension.psm1 b/...esources/MSFT_AADCustomAuthenticationExtension/MSFT_AADCustomAuthenticationExtension.psm1
@@ -61,6 +61,10 @@ function Get-TargetResource
         [System.String]
         $ApplicationId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $TenantId,
@@ -273,6 +277,10 @@ function Set-TargetResource
         [System.String]
         $ApplicationId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $TenantId,
@@ -458,6 +466,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -606,6 +618,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...es/MSFT_AADCustomAuthenticationExtension/MSFT_AADCustomAuthenticationExtension.schema.mof b/...es/MSFT_AADCustomAuthenticationExtension/MSFT_AADCustomAuthenticationExtension.schema.mof
diff --git a/...les/Microsoft365DSC/DSCResources/MSFT_AADEnrichedAuditLogs/MSFT_AADEnrichedAuditLogs.psm1 b/...les/Microsoft365DSC/DSCResources/MSFT_AADEnrichedAuditLogs/MSFT_AADEnrichedAuditLogs.psm1
@@ -32,6 +32,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -72,6 +76,7 @@ function Get-TargetResource
             Credential            = $Credential
             ApplicationId         = $ApplicationId
             TenantId              = $TenantId
+            ApplicationSecret     = $ApplicationSecret
             CertificateThumbprint = $CertificateThumbprint
             ManagedIdentity       = $ManagedIdentity.IsPresent
             AccessTokens          = $AccessTokens
@@ -124,6 +129,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -204,6 +213,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -311,6 +324,7 @@ function Export-TargetResource
             Credential            = $Credential
             ApplicationId         = $ApplicationId
             TenantId              = $TenantId
+            ApplicationSecret     = $ApplicationSecret
             CertificateThumbprint = $CertificateThumbprint
             ManagedIdentity       = $ManagedIdentity.IsPresent
             AccessTokens          = $AccessTokens

diff --git a/...crosoft365DSC/DSCResources/MSFT_AADEnrichedAuditLogs/MSFT_AADEnrichedAuditLogs.schema.mof b/...crosoft365DSC/DSCResources/MSFT_AADEnrichedAuditLogs/MSFT_AADEnrichedAuditLogs.schema.mof
diff --git a/...t365DSC/DSCResources/MSFT_AADFederationConfiguration/MSFT_AADFederationConfiguration.psm1 b/...t365DSC/DSCResources/MSFT_AADFederationConfiguration/MSFT_AADFederationConfiguration.psm1
@@ -53,6 +53,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -127,6 +131,7 @@ function Get-TargetResource
             Credential                      = $Credential
             ApplicationId                   = $ApplicationId
             TenantId                        = $TenantId
+            ApplicationSecret               = $ApplicationSecret
             CertificateThumbprint           = $CertificateThumbprint
             ManagedIdentity                 = $ManagedIdentity.IsPresent
             AccessTokens                    = $AccessTokens
@@ -200,6 +205,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -324,6 +333,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -446,6 +459,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...C/DSCResources/MSFT_AADFederationConfiguration/MSFT_AADFederationConfiguration.schema.mof b/...C/DSCResources/MSFT_AADFederationConfiguration/MSFT_AADFederationConfiguration.schema.mof
diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADFilteringPolicy/MSFT_AADFilteringPolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADFilteringPolicy/MSFT_AADFilteringPolicy.psm1
@@ -37,6 +37,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -109,6 +113,7 @@ function Get-TargetResource
             Credential            = $Credential
             ApplicationId         = $ApplicationId
             TenantId              = $TenantId
+            ApplicationSecret     = $ApplicationSecret
             CertificateThumbprint = $CertificateThumbprint
             ManagedIdentity       = $ManagedIdentity.IsPresent
             AccessTokens          = $AccessTokens
@@ -166,6 +171,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -259,6 +268,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -380,6 +393,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...s/Microsoft365DSC/DSCResources/MSFT_AADFilteringPolicy/MSFT_AADFilteringPolicy.schema.mof b/...s/Microsoft365DSC/DSCResources/MSFT_AADFilteringPolicy/MSFT_AADFilteringPolicy.schema.mof
diff --git a/...Microsoft365DSC/DSCResources/MSFT_AADFilteringPolicyRule/MSFT_AADFilteringPolicyRule.psm1 b/...Microsoft365DSC/DSCResources/MSFT_AADFilteringPolicyRule/MSFT_AADFilteringPolicyRule.psm1
@@ -41,6 +41,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -122,6 +126,7 @@ function Get-TargetResource
             Credential            = $Credential
             ApplicationId         = $ApplicationId
             TenantId              = $TenantId
+            ApplicationSecret     = $ApplicationSecret
             CertificateThumbprint = $CertificateThumbprint
             ManagedIdentity       = $ManagedIdentity.IsPresent
             AccessTokens          = $AccessTokens
@@ -183,6 +188,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -316,6 +325,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -477,6 +490,7 @@ function Export-TargetResource
                     Credential            = $Credential
                     ApplicationId         = $ApplicationId
                     TenantId              = $TenantId
+                    ApplicationSecret     = $ApplicationSecret
                     CertificateThumbprint = $CertificateThumbprint
                     ManagedIdentity       = $ManagedIdentity.IsPresent
                     AccessTokens          = $AccessTokens

diff --git a/...oft365DSC/DSCResources/MSFT_AADFilteringPolicyRule/MSFT_AADFilteringPolicyRule.schema.mof b/...oft365DSC/DSCResources/MSFT_AADFilteringPolicyRule/MSFT_AADFilteringPolicyRule.schema.mof
diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADFilteringProfile/MSFT_AADFilteringProfile.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADFilteringProfile/MSFT_AADFilteringProfile.psm1
@@ -45,6 +45,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -139,6 +143,7 @@ function Get-TargetResource
             Credential            = $Credential
             ApplicationId         = $ApplicationId
             TenantId              = $TenantId
+            ApplicationSecret     = $ApplicationSecret
             CertificateThumbprint = $CertificateThumbprint
             ManagedIdentity       = $ManagedIdentity.IsPresent
             AccessTokens          = $AccessTokens
@@ -204,6 +209,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -326,6 +335,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -473,6 +486,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...Microsoft365DSC/DSCResources/MSFT_AADFilteringProfile/MSFT_AADFilteringProfile.schema.mof b/...Microsoft365DSC/DSCResources/MSFT_AADFilteringProfile/MSFT_AADFilteringProfile.schema.mof
diff --git a/...owCustomTaskExtension/MSFT_AADIdentityGovernanceLifecycleWorkflowCustomTaskExtension.psm1 b/...owCustomTaskExtension/MSFT_AADIdentityGovernanceLifecycleWorkflowCustomTaskExtension.psm1
@@ -45,6 +45,10 @@ function Get-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -148,6 +152,7 @@ function Get-TargetResource
             Credential            = $Credential
             ApplicationId         = $ApplicationId
             TenantId              = $TenantId
+            ApplicationSecret     = $ApplicationSecret
             CertificateThumbprint = $CertificateThumbprint
             ManagedIdentity       = $ManagedIdentity.IsPresent
             AccessTokens          = $AccessTokens
@@ -213,6 +218,10 @@ function Set-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -349,6 +358,10 @@ function Test-TargetResource
         [System.String]
         $TenantId,
 
+        [Parameter()]
+        [System.Management.Automation.PSCredential]
+        $ApplicationSecret,
+
         [Parameter()]
         [System.String]
         $CertificateThumbprint,
@@ -491,6 +504,7 @@ function Export-TargetResource
                 Credential            = $Credential
                 ApplicationId         = $ApplicationId
                 TenantId              = $TenantId
+                ApplicationSecret     = $ApplicationSecret
                 CertificateThumbprint = $CertificateThumbprint
                 ManagedIdentity       = $ManagedIdentity.IsPresent
                 AccessTokens          = $AccessTokens

diff --git a/...omTaskExtension/MSFT_AADIdentityGovernanceLifecycleWorkflowCustomTaskExtension.schema.mof b/...omTaskExtension/MSFT_AADIdentityGovernanceLifecycleWorkflowCustomTaskExtension.schema.mof
-Original file line number
+Diff line change
@@ Expand Up / @@ -2,6 +2,8 @@ @@
     # UNRELEASED
+    * AAD
+      * Added ApplicationSecret auth method to multiple resources
     * MISC
       * Removed hardcoded Graph urls and replaced by MSCloudLoginAssistant values.
@@ Expand Down @@