Prompting for Azure credentials in PowerShell script

Question

Prompting for Azure credentials in PowerShell script

Rick Angel 216

Several members of our IT team need to regularly connect to multiple Azure Government environments via PowerShell. We usually run this script.

Connect-AzureAD -AzureEnvironmentName AzureUSGovernment
Connect-ExchangeOnline -ExchangeEnvironmentName O365USGovGCCHigh
Connect-MsolService -AzureEnvironment AzureUSGovernmentCloud

However the script requires us to enter our admin credentials multiple times. How can I prompt for username and password at the beginning of the script then pass those credentials through the rest of the script? Thanks.

3 answers

Your answer

Answer 1

Andreas Baumgarten 123.5K MVP Volunteer Moderator

Hi @Rick Angel ,

you can try this please:

$cred = Get-Credential  
Connect-AzureAD -AzureEnvironmentName AzureUSGovernment -Credential $cred  
Connect-ExchangeOnline -ExchangeEnvironmentName O365USGovGCCHigh -Credential $cred  
Connect-MsolService -AzureEnvironment AzureUSGovernmentCloud -Credential $cred

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Rick Angel 216 Reputation points

2021-05-14T18:02:23.757+00:00

Thanks for the reply.

I forgot to mention these accounts are using Microsoft MFA. When I run the mods you suggested I get this error "Connect-AzureAD : One or more errors occurred.: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor
authentication to access '00000002-0000-0000-c000-000000000000'."

Is there different syntax to pass through username and password but still prompt for MFA?

Answer 2

Andreas Baumgarten 123.5K MVP Volunteer Moderator

Hi @Rick Angel ,

I've never tried this ... but maybe working with an Access Token will help:

https://blog.simonw.se/getting-an-access-token-for-azuread-using-powershell-and-device-login-flow/

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Rick Angel 216 Reputation points

2021-05-21T18:55:10.373+00:00

I was not able to resolve with an access token. Still receive some errors.

I decided to leave the initial script to connect to Azure AD, Exchange Online, and MSOL in its original format which prompts three times for login. Then I removed the connection strings from the other scripts we use. So if our IT staff runs the initial script one time before running the other scripts they still have to respond to the three logins, but they do not need to respond each time they run the other scripts. Not ideal but still acceptable solution.

Answer 3

Ravindra Shukla 121

Hi @Rick Angel ,

Did you manage to solve the issue with MFA prompt in powershell script?

If yes, could you share the solution? I am also facing the same.

Invoke-RestMethod : {"error":"invalid_grant","error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor           
authentication to access '00000003-0000-0000-c000-000000000000'

Share via

Prompting for Azure credentials in PowerShell script

3 answers

Your answer