Skip to content

Commit 136b467

Browse files
authored
Merge pull request #8553 from NuAlex/docs-editor/verify-first-party-apps-sign-i-1742871180
AB#3963: Update verify-first-party-apps-sign-in.md
2 parents b583703 + 3b0946d commit 136b467

3 files changed

Lines changed: 35 additions & 6 deletions

File tree

28 KB
Loading
16.9 KB
Loading

support/entra/entra-id/governance/verify-first-party-apps-sign-in.md

Lines changed: 35 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -49,23 +49,52 @@ Although the apps that are listed in sign-in reports are owned by Microsoft and
4949

5050
## Verify a first-party Microsoft service principal through PowerShell
5151

52-
1. Open the Azure Active Directory module in PowerShell.
52+
### Using Microsoft Graph PowerShell SDK
5353

54-
2. In the PowerShell module, enter the following cmdlet:
54+
1. Open PowerShell, import Microsoft Graph PowerShell SDK and then connect to Microsoft Entra ID:
5555

5656
```cmd
57-
Get-AzureADServicePrincipal -Filter "DisplayName eq '<display-name>'" | fl *
57+
Import-Module Microsoft.Graph.Applications
58+
Connect-MgGraph
5859
```
5960

60-
Replace `<display name>` with the app's actual display name.
61+
2. In the PowerShell command-line, enter the display name of the application and run the following cmdlet:
6162

62-
[!INCLUDE [Azure AD PowerShell deprecation note](~/../support/reusable-content/msgraph-powershell/includes/aad-powershell-deprecation-note.md)]
63+
```cmd
64+
$appDisplayName = '<display name>'
65+
Get-MgServicePrincipal -Filter "DisplayName eq '$appDisplayName'" | Select-Object Id, DisplayName, SignInAudience, AppOwnerOrganizationId
66+
```
67+
68+
3. Review the `AppOwnerTenantId` value in the output.
69+
70+
:::image type="content" source="media/verify-first-party-apps-sign-in/review-the-app-owner-tenant-id-microsoft-graph.png" alt-text="Screenshot of the output of a request to show the Microsoft Entra service principal via Microsoft Graph PowerShell SDK.":::
71+
72+
In the screenshot, `f8cdef31-a31e-4b4a-93e4-5f571e91255a` is the Microsoft Service's Microsoft Entra tenant ID.
73+
74+
### Using Microsoft Entra PowerShell
75+
76+
1. Open PowerShell, import Microsoft Graph PowerShell SDK and connect to Microsoft Entra ID:
77+
78+
```cmd
79+
Import-Module Microsoft.Entra
80+
Connect-Entra
81+
```
82+
83+
2. In the PowerShell command-line, enter the display name of the application and run the following cmdlet:
84+
85+
```cmd
86+
$appDisplayName = '<display name>'
87+
Get-EntraServicePrincipal -SearchString $appDisplayName | Select-Object Id, DisplayName, SignInAudience, AppOwnerOrganizationId
88+
```
89+
6390
3. Review the result's `AppOwnerTenantId`.
6491

65-
:::image type="content" source="media/verify-first-party-apps-sign-in/review-the-app-owner-tenant-id.png" alt-text="Screenshot of the output of a request to show the Microsoft Entra service principal.":::
92+
:::image type="content" source="media/verify-first-party-apps-sign-in/review-the-app-owner-tenant-id-microsoft-entra.png" alt-text="Screenshot of the output of a request to show the Microsoft Entra service principal via Microsoft Entra PowerShell.":::
6693

6794
In the screenshot, `f8cdef31-a31e-4b4a-93e4-5f571e91255a` is the Microsoft Service's Microsoft Entra tenant ID.
6895

96+
97+
6998
## Application IDs of commonly used Microsoft applications
7099

71100
The following table lists some, but not all, first-party Microsoft applications. You may see these applications in the Sign-ins report in Microsoft Entra ID.

0 commit comments

Comments
 (0)