Get-EntraBetaPasswordSingleSignOnCredential

Get-EntraBetaPasswordSingleSignOnCredential

    -ServicePrincipalId <String>
    -PasswordSSOObjectId <PasswordSSOObjectId>
    [<CommonParameters>]

This cmdlet enables users to read their Password Single-Sign-On credentials for an application that they're part of. Specify ServicePrincipalId and PasswordSSOCredential parameters for retrieve SSO credentials. Admin could read the group credentials as well. Note that the password field is hidden for security purpose.

Connect-Entra -Scopes 'Application.ReadWrite.All', 'Directory.ReadWrite.All'
$servicePrincipal = Get-EntraBetaservicePrincipal -SearchString '<service-principal-name>'
Get-EntraBetaPasswordSingleSignOnCredential -ServicePrincipalId $servicePrincipal.Id -PasswordSSOObjectId 'bbbbbbbb-1111-2222-3333-cccccccccccc'

Id
--
cccccccc-2222-3333-4444-dddddddddddd

This example returns a password SSO credential for the given ServicePrincipalId and PasswordSSOObjectId.

• PasswordSSOObjectId parameter specifies the ID of the user or group this credential set belongs to.
• ServicePrincipalId parameter specifies the ID of a service principal. You can use Get-EntraBetaservicePrincipal cmdlet to get service principal object ID.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.