AzureAD / azure-activedirectory-powershell-tokenkey

Scripts to override the Azure Active Directory token signing key.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Issues with running this command

itaylorm opened this issue · comments

  1. You need run power shell as administrator
  2. You need to run this first set-executionpolicy unrestricted
  3. Files come zipped which you have to unzip before running
  4. Running the command Run .\install-aadGraphModule.ps1 is unsuccessful. I Typed R as prompted several times and then get the following message

Fixing Active Directory Authentication Library package directories ...
Not able to load ADAL assembly. Delete the Nugets folder under C:\Users\Documents\WindowsPowerShell\Module
s\AADGraph , restart PowerShell session and try again ...

I tried restarting power shell session and did again, sample problem (yes I deleted the indicated directory each time)

We've updated the scripts to address issue with loading ADAL. Can you try again and see if it works for you now? As for the other 4 points, we'll enhance the instructions to cover these point. Thanks for the feedback.

I worked with support and was the one that got it to work, so yes it works :)

After running this script, does my thumbprint in web.cofig will get changed? or Azure AD tenant FederationMetadat.xml file signing certificate will get changed?

This script does not modify neither your web.config nor your FederationMetadata.xml.

The FederationMetadata.xml has 2 signing certificates in it. This script just forces Azure AD to sign tokens with a specific cert from those listed in the FederationMetadata.xml, the newer one.