# Find apps missing SPs, select and register
Get-MgBetaAuditLogSignIn -Filter "signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'" | Out-GridView -PassThru | ForEach-Object {New-MgBetaServicePrincipal -AppId $_.appId}
Get-MgBetaAuditLogSignIn -Filter "signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'" | Out-GridView -PassThru | ForEach-Object {New-MgBetaServicePrincipal -AppId $_.appId}
This is awesome! Microsoft is killing off the ability for multi-tenant applications to authenticate in directories where a service principal has not been registered.
learn.microsoft.com/...
I'd like to automate discovery and remediation for admins, but I need help testing :)
learn.microsoft.com/...
I'd like to automate discovery and remediation for admins, but I need help testing :)
Retire Service Principal-Less Authentication - Microsoft identity platform
Learn about the mitigation steps tenant administrators should perform for service principal-less authentication behavior deprecation.
learn.microsoft.com
April 6, 2025 at 12:20 AM
# Find apps missing SPs, select and register
Get-MgBetaAuditLogSignIn -Filter "signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'" | Out-GridView -PassThru | ForEach-Object {New-MgBetaServicePrincipal -AppId $_.appId}
Get-MgBetaAuditLogSignIn -Filter "signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'" | Out-GridView -PassThru | ForEach-Object {New-MgBetaServicePrincipal -AppId $_.appId}
#MSXFAQ AppID, ServicePrincipal und ClientID www.msxfaq.de/cloud/authen... - Eine lange Liste von GUIDs mit dazugehörigen Applikationen und ServicePrincipals.
AppID, ServicePrincipal und ClientID
Frank's Microsoft Exchange FAQ
www.msxfaq.de
September 12, 2025 at 2:19 PM
#MSXFAQ AppID, ServicePrincipal und ClientID www.msxfaq.de/cloud/authen... - Eine lange Liste von GUIDs mit dazugehörigen Applikationen und ServicePrincipals.
Our latest MS Tech Bit is LIVE! @sqlballs.bsky.social presents #MicrosoftFabric Data Pipeline Service Principal Support!
Link: youtu.be/ZKjvmTMslg0
cc @joshluedeman.bsky.social @dbabulldog.bsky.social
Link: youtu.be/ZKjvmTMslg0
cc @joshluedeman.bsky.social @dbabulldog.bsky.social
#MicrosoftFabric #DataPipeline #Service #Principal Support!
Bradley Ball, aka @SQLBalls , walks through how to use an #EntraID, formerly #azureactivedirectory , #ServicePrincipal to connect to an #AzureSQL Database an...
youtu.be
November 8, 2023 at 4:11 PM
Our latest MS Tech Bit is LIVE! @sqlballs.bsky.social presents #MicrosoftFabric Data Pipeline Service Principal Support!
Link: youtu.be/ZKjvmTMslg0
cc @joshluedeman.bsky.social @dbabulldog.bsky.social
Link: youtu.be/ZKjvmTMslg0
cc @joshluedeman.bsky.social @dbabulldog.bsky.social
Compare this **Object ID** using the Microsoft Graph API to query for the details using [GET /servicePrincipals/{objectid}](/graph/api/serviceprincipal-get) and confirm that the servicePrincipalNames property is `urn:p2p_cert`. /4
March 16, 2025 at 6:27 PM
Compare this **Object ID** using the Microsoft Graph API to query for the details using [GET /servicePrincipals/{objectid}](/graph/api/serviceprincipal-get) and confirm that the servicePrincipalNames property is `urn:p2p_cert`. /4
Microsoft Fabric Update: Service principal support for Fabric Data Warehouse
blog.fabric.microsoft.com/en-in/blog/s...
#MicrosoftFabric #Serviceprincipal #MicrosoftFabricUpdate #Warehouse
blog.fabric.microsoft.com/en-in/blog/s...
#MicrosoftFabric #Serviceprincipal #MicrosoftFabricUpdate #Warehouse
Service principal support for Fabric Data Warehouse | Microsoft Fabric Blog | Microsoft Fabric
Announcing a significant enhancement in the way you can authenticate and manage your Fabric Data Warehouses: the introduction of service principal (SPN) support. This new feature empowers developers a...
blog.fabric.microsoft.com
January 16, 2025 at 11:33 AM
Microsoft Fabric Update: Service principal support for Fabric Data Warehouse
blog.fabric.microsoft.com/en-in/blog/s...
#MicrosoftFabric #Serviceprincipal #MicrosoftFabricUpdate #Warehouse
blog.fabric.microsoft.com/en-in/blog/s...
#MicrosoftFabric #Serviceprincipal #MicrosoftFabricUpdate #Warehouse
Microsoft deploying Microsoft Fabric con service
¿Deploy de Microsoft Fabric desde Azure DevOps que falla con 401? Configura el service principal, 3 branches y 12 variables sin editar en el navegador.
#microsoftfabric #azuredevops #serviceprincipal #cicd #cloud
¿Deploy de Microsoft Fabric desde Azure DevOps que falla con 401? Configura el service principal, 3 branches y 12 variables sin editar en el navegador.
#microsoftfabric #azuredevops #serviceprincipal #cicd #cloud
Microsoft deploying Microsoft Fabric con service
Tres branches, 12 variables y un service principal con rol Admin: como mover cambios de Fabric entre DEV, UAT y PROD sin editar en el navegador.
donweb.news
August 14, 2026 at 5:50 PM
Microsoft deploying Microsoft Fabric con service
¿Deploy de Microsoft Fabric desde Azure DevOps que falla con 401? Configura el service principal, 3 branches y 12 variables sin editar en el navegador.
#microsoftfabric #azuredevops #serviceprincipal #cicd #cloud
¿Deploy de Microsoft Fabric desde Azure DevOps que falla con 401? Configura el service principal, 3 branches y 12 variables sin editar en el navegador.
#microsoftfabric #azuredevops #serviceprincipal #cicd #cloud
Leaked Azure service-principal secret enabled attacker to jump to Global Administrator, gain root-level access, harvest keys, and persist across 26 app registrations. Azure permissions remain fragmented. #EntraID #AzureRBAC #MicrosoftGraph
No single pane of glass: Anatomy of an Azure permission takeover
A leaked Azure service-principal secret let an attacker self-assign Global Administrator, elevate to root-level resource access, harvest keys, and plant persistence across 26 application registrations. The incident exposed how Azure permission data is fragmented across Entra roles, Azure RBAC, Key Vault policies, bearer keys, and Microsoft Graph permissions, making full impact analysis difficult. #EntraID #AzureRBAC #KeyVault #MicrosoftGraph #ServicePrincipal
www.hendryadrian.com
July 15, 2026 at 12:30 AM
Leaked Azure service-principal secret enabled attacker to jump to Global Administrator, gain root-level access, harvest keys, and persist across 26 app registrations. Azure permissions remain fragmented. #EntraID #AzureRBAC #MicrosoftGraph
Need to set up a Power BI Sentinel #ServicePrincipal for #PowerBI?
Our step-by-step guide shows you how to connect securely and manage access like a pro.
🛠 Read it here⬇️
www.powerbisentinel.com/creating-a-s...
#PowerBITool #PowerBIAdmin #PowerBIGovernance #ServicePrincipal #PowerBISetup
Our step-by-step guide shows you how to connect securely and manage access like a pro.
🛠 Read it here⬇️
www.powerbisentinel.com/creating-a-s...
#PowerBITool #PowerBIAdmin #PowerBIGovernance #ServicePrincipal #PowerBISetup
July 22, 2025 at 4:05 PM
Need to set up a Power BI Sentinel #ServicePrincipal for #PowerBI?
Our step-by-step guide shows you how to connect securely and manage access like a pro.
🛠 Read it here⬇️
www.powerbisentinel.com/creating-a-s...
#PowerBITool #PowerBIAdmin #PowerBIGovernance #ServicePrincipal #PowerBISetup
Our step-by-step guide shows you how to connect securely and manage access like a pro.
🛠 Read it here⬇️
www.powerbisentinel.com/creating-a-s...
#PowerBITool #PowerBIAdmin #PowerBIGovernance #ServicePrincipal #PowerBISetup
#MSXFAQ EXO EWS 2025/2026 www.msxfaq.de/cloud/exchan... - Wenn ihre EWS-basierte Applikation mit Application_Impersonation nicht mehr mit Exchange Online funktioniert, dann steht ein Wechsel auf ServicePrincipal an und im Okt 2026 ist EWS eh aus.
EXO EWS 2025/2026
Frank's Microsoft Exchange FAQ
www.msxfaq.de
March 12, 2025 at 1:48 AM
#MSXFAQ EXO EWS 2025/2026 www.msxfaq.de/cloud/exchan... - Wenn ihre EWS-basierte Applikation mit Application_Impersonation nicht mehr mit Exchange Online funktioniert, dann steht ein Wechsel auf ServicePrincipal an und im Okt 2026 ist EWS eh aus.
Gah, Bluesky ate it.. Can you try this? (Remove the spaces before each period)
Invoke-MgGraphRequest -Uri "https://graph .microsoft .com/beta/auditLogs/signIns?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1"
Invoke-MgGraphRequest -Uri "https://graph .microsoft .com/beta/auditLogs/signIns?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1"
April 5, 2025 at 2:28 AM
Gah, Bluesky ate it.. Can you try this? (Remove the spaces before each period)
Invoke-MgGraphRequest -Uri "https://graph .microsoft .com/beta/auditLogs/signIns?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1"
Invoke-MgGraphRequest -Uri "https://graph .microsoft .com/beta/auditLogs/signIns?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1"
Anyone able to test this?
#Remove the space after https
(Invoke-MgGraphRequest -Uri "https ://graph.microsoft.com/...?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1").value
#Remove the space after https
(Invoke-MgGraphRequest -Uri "https ://graph.microsoft.com/...?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1").value
April 5, 2025 at 2:11 AM
Anyone able to test this?
#Remove the space after https
(Invoke-MgGraphRequest -Uri "https ://graph.microsoft.com/...?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1").value
#Remove the space after https
(Invoke-MgGraphRequest -Uri "https ://graph.microsoft.com/...?`$filter=signInEventTypes/any(t: t eq 'servicePrincipal') and servicePrincipalId eq '00000000-0000-0000-0000-000000000000'&`$top=1").value
Logging in to @Azure Germany with X.509 & service principals using PowerShell & azure-cli http://blog.geuer-pollmann.de/blog/2016/06/27/azure-arm-serviceprincipal/
November 20, 2024 at 1:46 PM
Logging in to @Azure Germany with X.509 & service principals using PowerShell & azure-cli http://blog.geuer-pollmann.de/blog/2016/06/27/azure-arm-serviceprincipal/
Use shareable Service Principal Name with Power Apps: We are excited to announce an enhancement in how Power Apps connects to SQL Server. Service Principal Name (SPN) based connections are now shareable! This enhancement marks a key step forward… @MSPowerPlat #PowerApps #SQLServer #ServicePrincipal
Use shareable Service Principal Name with Power Apps
We are excited to announce an enhancement in how Power Apps connects to SQL Server. Service Principal Name (SPN) based connections are now shareable! This enhancement marks a key step forward in simplifying and securing access to your enterprise applications. Previously, a SPN based connection was not shareable, which meant that if an app was
The post Use shareable Service Principal Name with Power Apps appeared first on Microsoft Power Platform Blog.
dlvr.it
May 4, 2025 at 7:54 AM
Use shareable Service Principal Name with Power Apps: We are excited to announce an enhancement in how Power Apps connects to SQL Server. Service Principal Name (SPN) based connections are now shareable! This enhancement marks a key step forward… @MSPowerPlat #PowerApps #SQLServer #ServicePrincipal
3. IsSensitiveAction ▶️
The Graph request includes a POST to the servicePrincipal endpoint, which is flagged as a sensitive modification. This logic is experimental and simplified, so it may result in inaccurate classification and should be used in combo with others indicators.
The Graph request includes a POST to the servicePrincipal endpoint, which is flagged as a sensitive modification. This logic is experimental and simplified, so it may result in inaccurate classification and should be used in combo with others indicators.
July 17, 2025 at 6:43 AM
3. IsSensitiveAction ▶️
The Graph request includes a POST to the servicePrincipal endpoint, which is flagged as a sensitive modification. This logic is experimental and simplified, so it may result in inaccurate classification and should be used in combo with others indicators.
The Graph request includes a POST to the servicePrincipal endpoint, which is flagged as a sensitive modification. This logic is experimental and simplified, so it may result in inaccurate classification and should be used in combo with others indicators.