Set-EntraBetaPasswordSingleSignOnCredential

Set-EntraBetaPasswordSingleSignOnCredential

    -ServicePrincipalId <String>
    -PasswordSSOCredential <PasswordSSOCredentials>
    [<CommonParameters>]

This cmdlet enables users to set their Password Single-Sign-On credentials for an application that they're part of. Specify ServicePrincipalId and PasswordSSOCredential parameters to updates SSO credentials. Admin could set the group credentials as well.

Connect-Entra -Scopes 'Application.ReadWrite.All', 'Directory.ReadWrite.All'
$servicePrincipal = Get-EntraBetaservicePrincipal -SearchString '<service-principal-name>'
$credentials = New-Object -TypeName Microsoft.Open.MSGraph.Model.PasswordSSOCredentials
$credentials.Id = '<user-or-group-Id>'
$creds1 = [Microsoft.Open.MSGraph.Model.PasswordSSOCredential]@{FieldId = "param_emailOrUserName"; Value = "foobar@ms.com"; Type = "text" }
$creds2 = [Microsoft.Open.MSGraph.Model.PasswordSSOCredential]@{FieldId = "param_password"; Value = "my-secret"; Type = "password" }
$credentials.Credentials = @($creds1, $creds2)

Set-EntraBetaPasswordSingleSignOnCredential -ServicePrincipalId $servicePrincipal.Id -PasswordSSOCredential $credentials

This example demonstrates how to set the password SSO credentials for the given ServicePrincipalId and PasswordSSOObjectId.

• -PasswordSSOObjectId parameter specifies the User or Group ID.
• -ServicePrincipalId parameter specifies the object ID of a service principal.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.