Skip to content

Commit f3b658f

Browse files
committed
Learn Editor: Update verify-first-party-apps-sign-in.md
1 parent 5500272 commit f3b658f

1 file changed

Lines changed: 35 additions & 6 deletions

File tree

support/entra/entra-id/governance/verify-first-party-apps-sign-in.md

Lines changed: 35 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -49,23 +49,52 @@ Although the apps that are listed in sign-in reports are owned by Microsoft and
4949

5050
## Verify a first-party Microsoft service principal through PowerShell
5151

52-
1. Open the Azure Active Directory module in PowerShell.
52+
### Using Microsoft Graph PowerShell SDK
5353

54-
2. In the PowerShell module, enter the following cmdlet:
54+
1. Open PowerShell, import Microsoft Graph PowerShell SDK and connect to Microsoft Entra ID:
5555

5656
```cmd
57-
Get-AzureADServicePrincipal -Filter "DisplayName eq '<display-name>'" | fl *
57+
Import-Module Microsoft.Graph.Applications
58+
Connect-MgGraph
5859
```
5960

60-
Replace `<display name>` with the app's actual display name.
61+
2. In the PowerShell command-line, enter the display name of the application and run the following cmdlet:
6162

62-
[!INCLUDE [Azure AD PowerShell deprecation note](~/../support/reusable-content/msgraph-powershell/includes/aad-powershell-deprecation-note.md)]
63+
```cmd
64+
$appDisplayName = '<display name>'
65+
Get-MgServicePrincipal -Filter "DisplayName eq '$appDisplayName'" | Select-Object Id, DisplayName, SignInAudience, AppOwnerOrganizationId
66+
```
67+
6368
3. Review the result's `AppOwnerTenantId`.
6469

65-
:::image type="content" source="media/verify-first-party-apps-sign-in/review-the-app-owner-tenant-id.png" alt-text="Screenshot of the output of a request to show the Microsoft Entra service principal.":::
70+
:::image type="content" source="media/verify-first-party-apps-sign-in/review-the-app-owner-tenant-id-microsoft-graph.png" alt-text="Screenshot of the output of a request to show the Microsoft Entra service principal via Microsoft Graph PowerShell SDK.":::
6671

6772
In the screenshot, `f8cdef31-a31e-4b4a-93e4-5f571e91255a` is the Microsoft Service's Microsoft Entra tenant ID.
6873

74+
### Using Microsoft Entra PowerShell
75+
76+
1. Open PowerShell, import Microsoft Graph PowerShell SDK and connect to Microsoft Entra ID:
77+
78+
```cmd
79+
Import-Module Microsoft.Graph.Applications
80+
Connect-MgGraph
81+
```
82+
83+
2. In the PowerShell command-line, enter the display name of the application and run the following cmdlet:
84+
85+
```cmd
86+
$appDisplayName = '<display name>'
87+
Get-EntraServicePrincipal -SearchString $appDisplayName | Select-Object Id, DisplayName, SignInAudience, AppOwnerOrganizationId
88+
```
89+
90+
3. Review the result's `AppOwnerTenantId`.
91+
92+
:::image type="content" source="media/verify-first-party-apps-sign-in/review-the-app-owner-tenant-id-microsoft-entra.png" alt-text="Screenshot of the output of a request to show the Microsoft Entra service principal via Microsoft Entra PowerShell.":::
93+
94+
In the screenshot, `f8cdef31-a31e-4b4a-93e4-5f571e91255a` is the Microsoft Service's Microsoft Entra tenant ID.
95+
96+
97+
6998
## Application IDs of commonly used Microsoft applications
7099

71100
The following table lists some, but not all, first-party Microsoft applications. You may see these applications in the Sign-ins report in Microsoft Entra ID.

0 commit comments

Comments
 (0)