Connect-EntraExporter.ps1 uses an outdated list of sovereign cloud names and endpoints. These should be updated to reflect additions and changes:
Name AzureADEndpoint GraphEndpoint Type
---- --------------- ------------- ----
BleuCloud https://login.sovcloud-identity.fr https://graph.svc.sovcloud.fr Built-in
China https://login.chinacloudapi.cn https://microsoftgraph.chinacloudapi.cn Built-in
DelosCloud https://login.sovcloud-identity.de https://graph.svc.sovcloud.de Built-in
Global https://login.microsoftonline.com https://graph.microsoft.com Built-in
GovSGCloud https://login.sovcloud-identity.sg https://graph.svc.sovcloud.sg Built-in
USGov https://login.microsoftonline.us https://graph.microsoft.us Built-in
USGovDoD https://login.microsoftonline.us https://dod-graph.microsoft.us Built-in
I also noted a new requirement in the latest documentation:
Sovereign cloud environments (BleuCloud, DelosCloud, GovSGCloud) require a custom application registration. You cannot use the default Microsoft Graph PowerShell application in these environments. When registering your application, add an additional redirect URI of ms-appx-web://Microsoft.AAD.BrokerPlugin/<YOUR_APP_CLIENT_ID> to support WAM broker-based authentication. Requires Microsoft.Graph.Authentication v2.36.1 or later.
https://github.com/microsoftgraph/msgraph-sdk-powershell/pull/3595/changes#diff-91906a228bc2821f07fd4b64d001f7ac10d35a60fe4bc9b1230fa9da9ca58d63R68-R69
Connect-EntraExporter.ps1uses an outdated list of sovereign cloud names and endpoints. These should be updated to reflect additions and changes:I also noted a new requirement in the latest documentation: