search

AzureAD / azure-activedirectory-powershell-tokenkey

Scripts to override the Azure Active Directory token signing key.
8 stars 12 forks source link

Issues with running this command #1

Open itaylorm opened 8 years ago

itaylorm commented 8 years ago
  1. You need run power shell as administrator
  2. You need to run this first set-executionpolicy unrestricted
  3. Files come zipped which you have to unzip before running
  4. Running the command Run .\install-aadGraphModule.ps1 is unsuccessful. I Typed R as prompted several times and then get the following message

Fixing Active Directory Authentication Library package directories ... Not able to load ADAL assembly. Delete the Nugets folder under C:\Users\Documents\WindowsPowerShell\Module s\AADGraph , restart PowerShell session and try again ...

I tried restarting power shell session and did again, sample problem (yes I deleted the indicated directory each time)

gsacavdm commented 8 years ago

We've updated the scripts to address issue with loading ADAL. Can you try again and see if it works for you now? As for the other 4 points, we'll enhance the instructions to cover these point. Thanks for the feedback.

itaylorm commented 8 years ago

I worked with support and was the one that got it to work, so yes it works :)

gadhiya-nilesh commented 8 years ago

After running this script, does my thumbprint in web.cofig will get changed? or Azure AD tenant FederationMetadat.xml file signing certificate will get changed?

gsacavdm commented 8 years ago

This script does not modify neither your web.config nor your FederationMetadata.xml.

The FederationMetadata.xml has 2 signing certificates in it. This script just forces Azure AD to sign tokens with a specific cert from those listed in the FederationMetadata.xml, the newer one.