Forum Discussion

Gerald_Glen's avatar
Gerald_Glen
Copper Contributor
May 01, 2020

Is it possible to update SAML token signing certificate via PowerShell in Azure AD?

Hi,   We've 200+ SAML based apps federated with our Azure AD tenant. We are using a common cert for SAML token signing for all these apps. Cert is due for renewal by end of this year.   Does some...
Azure Active Directory (AAD)
Luis Leon Plata's avatar
Luis Leon Plata
Former Employee
May 13, 2020

Gerald_Glen this is something we're actively working on now. We hope to have good news for you by the end of June.

Gerald_Glen's avatar
Gerald_Glen
Copper Contributor
May 15, 2020

Thanks Luis Leon Plata , looking forward to hear it soon...

  • Luis Leon Plata's avatar
    Luis Leon Plata
    Former Employee
    Jun 05, 2020

    Hey Gerald_Glen - We have you can manage your key credentials now using APIs. I think it also works for PowerShell but I haven't tried personally. Here is a doc on how to use the APIs: https://aka.ms/aadgallery-sso-api

     

    I'm planning to do something similar but using PowerShell.

     

    Thanks,

    Luis

    • gd-29's avatar
      gd-29
      Brass Contributor
      Aug 18, 2020

      any new traction here? 

      updating via powershell would be great. i'm actually more interested in reporting on the signing certificate and expiration dates so we can plan rotation with our 3 party vendors.

       

      also to audit and make sure the notification address is our distro group.

      • bgmonroe's avatar
        bgmonroe
        Copper Contributor
        Aug 19, 2020

        gd-29

        I was able to accomplish this with the following:

         

         

        (Get-AzureADServicePrincipal -Filter "displayName eq '$app_name'").keyCredentials | Where-Object {$_.Usage -eq "Sign"} |select EndDate

         

         

        Where $app_name is the name of your AAD app.

  • PeterJ_Inobits's avatar
    PeterJ_Inobits
    Iron Contributor
    May 15, 2020

    Gerald_Glen

    A dumb question but is this in a BYOK scenario for in the tenant? 

Resources