What are caConfigoration and Certificate Authority fields in SendSuccessNotificaton

igalfsg commented 1 year ago

Hi looking at the documentation I see the following fields for send success:

transactionId - The SCEP Transaction ID
certificateRequest - DER-encoded PKCS # 10 Certificate Request Base64 encoded as a string
certThumprint - SHA1 hash of the thumbprint of the provisioned certificate
certSerialNumber - Serial number of the provisioned certificate
certExpirationDate - Expiration date of the provisioned certificate. The date time string should be formatted as web UTC time (YYYY-MM-DDThh:mm:ss.sssTZD) ISO 8601.
certIssuingAuthority - Name of the authority that issued the certificate

However, looking at the example I see the extra fields of "caConfiguration" and "certificateAuthority". What are these values supposed to be?

ksnagendran commented 1 year ago

Does anyone have an answer to the above question?

towijo commented 5 months ago

I'm also wondering and they still seems to be missing in the documentation (https://learn.microsoft.com/sv-se/mem/intune/protect/scep-libraries-apis#integrate-with-intune).

They were added in a PR named "Add revocation info to notify success" (https://github.com/microsoft/Intune-Resource-Access/pull/94/files), which might give some clues, but i would like to have better documentation regarding these parameters and expected values. They seem to be optional as passing null-values are fine.

Also the documentation for "certIssuingAuthority" is a bit underwhelming. Is it an arbitrary name of the authority just for informational purpose? is it the Common Name (CN) or the Issuing CA? is it the full FQDN of the CA? it leaves you wondering what the purpose is and the exact content specification.

microsoft / Intune-Resource-Access

What are caConfigoration and Certificate Authority fields in SendSuccessNotificaton #138