Forum Discussion

Gerald_Glen's avatar
Gerald_Glen
Copper Contributor
May 01, 2020

Is it possible to update SAML token signing certificate via PowerShell in Azure AD?

Hi,   We've 200+ SAML based apps federated with our Azure AD tenant. We are using a common cert for SAML token signing for all these apps. Cert is due for renewal by end of this year.   Does some...
Azure Active Directory (AAD)
Luis Leon Plata's avatar
Luis Leon Plata
Icon for Microsoft rankMicrosoft
Jun 05, 2020

Hey Gerald_Glen - We have you can manage your key credentials now using APIs. I think it also works for PowerShell but I haven't tried personally. Here is a doc on how to use the APIs: https://aka.ms/aadgallery-sso-api

 

I'm planning to do something similar but using PowerShell.

 

Thanks,

Luis

  • gd-29's avatar
    gd-29
    Brass Contributor
    Aug 18, 2020

    any new traction here? 

    updating via powershell would be great. i'm actually more interested in reporting on the signing certificate and expiration dates so we can plan rotation with our 3 party vendors.

     

    also to audit and make sure the notification address is our distro group.

    • bgmonroe's avatar
      bgmonroe
      Copper Contributor
      Aug 19, 2020

      gd-29

      I was able to accomplish this with the following:

       

       

      (Get-AzureADServicePrincipal -Filter "displayName eq '$app_name'").keyCredentials | Where-Object {$_.Usage -eq "Sign"} |select EndDate

       

       

      Where $app_name is the name of your AAD app.

Resources