Manipulate single page application's redirect URIs with az CLI in AD's app registration

Question

Manipulate single page application's redirect URIs with az CLI in AD's app registration

Jacky Lam 210

Hi,

I need to write a script to add and remove some entries in the single page application of app registration in AD. Is it possible to do this with az rest? Any example? Thanks.

Jacky

Shweta Mathur 30,301 Reputation points Microsoft Employee Moderator

2023-06-26T11:07:55.9066667+00:00

Hi @Jacky Lam ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Accepted answer

0 additional answers

Your answer

Shweta Mathur 30,301 Reputation points Microsoft Employee Moderator

2023-06-26T11:07:55.9066667+00:00

Hi @Jacky Lam ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Shweta Mathur 30,301 Microsoft Employee Moderator

Hi @Jacky Lam ,

Thanks for reaching out.

Yes, it is possible to add and remove entries in the single page application of app registration in AD using script.

You can refer the below scripts to add/ remove entries of application registration with az CLI commands.

https://github.com/microsoft/healthcare-apis-samples/blob/main/src/scripts/appregistrationcli.http

Reference: https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application-cli-rest

You can also use the az rest command to add/ update and delete the applications

az rest --method post --uri https://graph.microsoft.com/v1.0/applications --headers "Content-Type=application/json" --body "{\"displayName\":\"webapi1\",\"signInAudience\":\"AzureADMyOrg\",\"web\":{\"redirectUris\":[\"https://jwt.ms\"]},\"requiredResourceAccess\":[{\"resourceAppId\":\"00000003-0000-0000-c000-000000000000\",\"resourceAccess\":[{\"id\":\"e1fe6dd8-ba31-4d61-89e7-88639da4683d\",\"type\":\"Scope\"}]}]}"

Reference: https://www.azurecitadel.com/rest-api/cli/

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Jacky Lam 210

The suggested command seems apply for Web redirect URIs instead of Single-page application Redirect URIs. Based on your suggested command, I modified a bit like this:

az rest --method post --uri https://graph.microsoft.com/v1.0/applications --headers "Content-Type=application/json" --body "{"displayName":"TEST-PROJECT","signInAudience":"AzureADMyOrg","spa":{"redirectUris":["https://a.b.c","https://d.e.f"]}}"

where "https://a.b.c" is the existing entries and https://d.e.f is the new one I want to add.

But after executing the command, it outputs a JSON like this:

{
  "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#applications/$entity",
  "addIns": [],
  "api": {
    "acceptMappedClaims": null,
    "knownClientApplications": [],
    "oauth2PermissionScopes": [],
    "preAuthorizedApplications": [],
    "requestedAccessTokenVersion": null
  },
  "appId": "d9b36512-f5a4-4da0-ae35-29fc99b68c76",
  "appRoles": [],
  "applicationTemplateId": null,
  "certification": null,
  "createdDateTime": "2023-06-20T10:57:56.9570946Z",
  "defaultRedirectUri": null,
  "deletedDateTime": null,
  "description": null,
  "disabledByMicrosoftStatus": null,
  "displayName": "TEST-PROJECT",
  "groupMembershipClaims": null,
  "id": "28723f90-9aaa-48d6-8810-e08a902c89fb",
  "identifierUris": [],
  "info": {
    "logoUrl": null,
    "marketingUrl": null,
    "privacyStatementUrl": null,
    "supportUrl": null,
    "termsOfServiceUrl": null
  },
  "isDeviceOnlyAuthSupported": null,
  "isFallbackPublicClient": null,
  "keyCredentials": [],
  "notes": null,
  "optionalClaims": null,
  "parentalControlSettings": {
    "countriesBlockedForMinors": [],
    "legalAgeGroupRule": "Allow"
  },
  "passwordCredentials": [],
  "publicClient": {
    "redirectUris": []
  },
  "publisherDomain": "konew.com",
  "requestSignatureVerification": null,
  "requiredResourceAccess": [],
  "samlMetadataUrl": null,
  "serviceManagementReference": null,
  "servicePrincipalLockConfiguration": null,
  "signInAudience": "AzureADMyOrg",
  "spa": {
    "redirectUris": [
      "https://a.b.c",
      "https://d.e.f",
    ]
  },
  "tags": [],
  "tokenEncryptionKeyId": null,
  "verifiedPublisher": {
    "addedDateTime": null,
    "displayName": null,
    "verifiedPublisherId": null
  },
  "web": {
    "homePageUrl": null,
    "implicitGrantSettings": {
      "enableAccessTokenIssuance": false,
      "enableIdTokenIssuance": false
    },
    "logoutUrl": null,
    "redirectUriSettings": [],
    "redirectUris": []
  }
}

But checking the result in portal, the new entity is not added.

Shweta Mathur 30,301 Reputation points Microsoft Employee Moderator

2023-06-22T06:41:07.4666667+00:00
Hi @Jacky Lam ,

Apologies for the delay in response.

The command you are trying is to create the application and not modify the existing application.

post command is used to create the new application. To update the existing details, patch command needs to be used.

az rest --method post --uri https://graph.microsoft.com/v1.0/applications --headers 'Content-Type=application/json' --body '{"displayName":"TEST-PROJECT1","signInAudience":"AzureADMyOrg","spa":{"redirectUris":["https://a.b.c","https://def.com"]}}'

The above command will be used to register the new application.

To update the existing redirect URL of the application, you need to pass below command

az rest --method PATCH --uri 'https://graph.microsoft.com/v1.0/applications/'67b58a6a-aa17-4ac9-90f9-72c16f124c82 --headers 'Content-Type=application/json' --body '{"spa":{"redirectUris":["'$redirectUri'"]}}'

which will update existing URI to new one.

Hope this will help you.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.
Jacky Lam 210 Reputation points

2023-06-23T04:53:43.94+00:00

Thanks for your response. I tried your command but it returns "Resource not found". May I know if "67b58a6a-aa17-4ac9-90f9-72c16f124c82" is the Application ID?
Shweta Mathur 30,301 Reputation points Microsoft Employee Moderator

2023-06-23T09:34:08.23+00:00

Apologies I missed to mention that 67b58a6a-aa17-4ac9-90f9-72c16f124c82 is the object id of the application.
Jacky Lam 210 Reputation points

2023-06-27T00:22:45.3233333+00:00

Unfortunately, it still doesn't work. I run the following command:

az rest --method PATCH --uri 'https://graph.microsoft.com/v1.0/applications/<object ID>' --headers 'Content-Type=application/json' --body '{"spa":{"redirectUris":["https://a.b.c"]}}'

The object ID is directly copy from portal. The command run successfully and return code is zero (no output in console). However, after refreshing the portal page, I cannot see the url is added.
Jacky Lam 210 Reputation points

2023-06-27T00:25:43.18+00:00

Oh...it works after waiting for half a minute, through it erases all my existing URLs and add the one in the command. But it is good enough. Thanks.

Share via

Manipulate single page application's redirect URIs with az CLI in AD's app registration

0 additional answers

Your answer