Table of Contents

Register-PnPEntraIDAppForInteractiveLogin

SYNOPSIS

Registers an Entra ID App for use with Interactive login

SYNTAX

Generate App using Interactive Login

Register-PnPEntraIDAppForInteractiveLogin -ApplicationName <String>
                                       -Tenant <String>
                                       [-GraphApplicationPermissions <Permission[]>]
                                       [-GraphDelegatePermissions <Permission[]>]
                                       [-SharePointApplicationPermissions <Permission[]>]
                                       [-SharePointDelegatePermissions <Permission[]>]
                                       [-LogoFilePath <string>]
                                       [-MicrosoftGraphEndPoint <string>]
                                       [-EntraIDLoginEndPoint <string>]
                                       [-SignInAudience <EntraIDSignInAudience>]

Generate App using Device Login

Register-PnPEntraIDAppForInteractiveLogin -ApplicationName <String>
                                       -Tenant <String>
                                       -DeviceLogin
                                       [-GraphApplicationPermissions <Permission[]>]
                                       [-GraphDelegatePermissions <Permission[]>]
                                       [-SharePointApplicationPermissions <Permission[]>]
                                       [-SharePointDelegatePermissions <Permission[]>]
                                       [-LogoFilePath <string>]
                                       [-SignInAudience <EntraIDSignInAudience>]

DESCRIPTION

Registers an Entra ID App for use with the interactive login on Connect-PnPOnline. By default it assumes an Interactive login, but you can decide to use Device Login auth by specifying -DeviceLogin.

EXAMPLES

EXAMPLE 1

Register-PnPEntraIDAppForInteractiveLogin -ApplicationName TestApp -Tenant yourtenant.onmicrosoft.com

Creates a new Entra ID Application registration. The application will be setup with the following delegate permissions to consent: AllSites.FullControl, Group.ReadWrite.All, User.ReadWrite.All, TermStore.ReadWrite.All. A browser window will be shown allowing you to authenticate.

EXAMPLE 2

Register-PnPEntraIDAppForInteractiveLogin -ApplicationName TestApp -Tenant yourtenant.onmicrosoft.com -GraphDelegatePermissions "Group.Read.All" -SharePointDelegatePermissions "AllSites.FullControl"

Creates a new Entra ID Application registration. The application will be setup with the following delegate permissions to consent: Group.Read.All, AllSites.FullControl. A browser window will be shown allowing you to authenticate.

PARAMETERS

-DeviceLogin

If specified, a device login flow, supporting Multi-Factor Authentication will be used to authenticate towards the Microsoft Graph.

Type: SwitchParameter
Parameter Sets: (All)

Required: False
Position: Named
Accept pipeline input: False

-ApplicationName

The name of the Entra ID Application to create.

Type: String
Parameter Sets: (All)

Required: True
Position: Named
Accept pipeline input: False

-GraphApplicationPermissions

Specify which Microsoft Graph Application permissions to request.

Type: Permission[]
Parameter Sets: Generate Certificate

Required: False
Position: 0
Accept pipeline input: False

-GraphDelegatePermissions

Specify which Microsoft Graph Delegate permissions to request.

Type: Permission[]
Parameter Sets: Generate Certificate

Required: False
Position: 0
Accept pipeline input: False

-SharePointApplicationPermissions

Specify which Microsoft SharePoint Application permissions to request.

Type: Permission[]
Parameter Sets: Generate Certificate

Required: False
Position: 0
Accept pipeline input: False

-SharePointDelegatePermissions

Specify which Microsoft SharePoint Delegate permissions to request.

Type: Permission[]
Parameter Sets: Generate Certificate

Required: False
Position: 0
Accept pipeline input: False

-Tenant

The identifier of your tenant, e.g. mytenant.onmicrosoft.com

Type: String
Parameter Sets: (All)

Required: True
Position: Named
Accept pipeline input: False

-AzureEnvironment

The Azure environment to use for authentication, the defaults to 'Production' which is the main Azure environment.

Type: AzureEnvironment
Parameter Sets: (All)
Aliases:
Accepted values: Production, PPE, China, Germany, USGovernment, USGovernmentHigh, USGovernmentDoD, Custom

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-LogoFilePath

Sets the logo for the Entra ID application. Provide a full path to a local image file on your disk which you want to use as the logo.

Type: String
Parameter Sets: (All)

Required: False
Position: Named
Accept pipeline input: False

-EntraIDLoginEndPoint

Sets the EntraID login endpoint to be used for creation of the app. This only works if Azure Environment parameter is set to Custom

Type: String
Parameter Sets: (All)

Required: False
Position: Named
Accept pipeline input: False

-MicrosoftGraphEndPoint

Sets the Microsoft Graph endpoint to be used for creation of the app. This only works if Azure Environment parameter is set to Custom

Type: String
Parameter Sets: (All)

Required: False
Position: Named
Accept pipeline input: False

-SignInAudience

Sets the sign in audience. Use this to make the app support Single tenant accounts, Multi-tenant accounts, Multi-tenant + personal accounts & personal accounts only.

Type: String
Parameter Sets: Generate Certificate

Required: False
Position: Named
Accept pipeline input: False

Microsoft 365 Patterns and Practices