Тёмный

Get Automatic Notifications on Expiring Azure App Registration Client Secrets with Logic Apps 

Graph Explorer
Подписаться 565
Просмотров 15 тыс.
50% 1

Опубликовано:

 

2 окт 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 95   
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Part Two is here the updated tutorial ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@microsoftgraphExplorer
@microsoftgraphExplorer 10 месяцев назад
Hello everyone. It appears that Microsoft have changed something on logic apps due to which some dynamic variables are not available, please let me know if you would like me to do a same video again with latest values.
@michaelleo2861
@michaelleo2861 9 месяцев назад
Yes please, I would love an updated tutorial as I am trying to roll this out as we speak. Thank you so much in advance.
@joyan0001
@joyan0001 8 месяцев назад
Yes. please provide some guidance on the changes so my dynamic variables can be showing on the notification email.
@jaymajor4086
@jaymajor4086 7 месяцев назад
Hi is the new video out yet ?
@popegon20
@popegon20 7 месяцев назад
Yes please, I would love an updated tutorial
@georgexenoulis7742
@georgexenoulis7742 6 месяцев назад
Me too!!
@roy170591008
@roy170591008 Год назад
Nice video, good explenation. Next time, please stop eating candy or whatever you where doing... those smacking (like in 9:40 - 9:50) sounds making me cringe to the point of not wanting to watch it but had to because i wanted to know how. (just a friendly advice)
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Thank you sir, Your feedback noted, I appreciate your feedback. Won't happen again. Glad to know that the video helped you in some way.
@ericbuhrendorf
@ericbuhrendorf 8 месяцев назад
Thank you for the video but OMG MICROSOFT... email notifications for action items is so basic...
@MohammadSaqib-vv6kp
@MohammadSaqib-vv6kp 4 месяца назад
@microsoftGraphExplorer, I have more than 10 K registered application in Tenant, How to get details of all? Does enable Pagination on the HTTP action that queries for the App Registrations. (It’s found in the settings of the action, via the three dots) can help, also it gives wrong info where no secret not used for app (Reg App W/O Secret), also How to fix issue where as it stop when reg application is W/O secret ? Also How to send email to application owners (more than one).
@binoysankar2281
@binoysankar2281 4 месяца назад
Hi, I am working in an organisation where I can't get to have the Admin Grant access to read all application for my SP. Is there any workaround to this problem?
@microsoftgraphExplorer
@microsoftgraphExplorer 4 месяца назад
Unfortunately no. Those are security level permissions and needs to be there and we do not have any work around for it
@binoysankar2281
@binoysankar2281 4 месяца назад
@@microsoftgraphExplorer What I meant is to access graph api using my user account and access all the app registrations that the logged in user has created which is secured rather than have access to read all apps under the tenant.
@microsoftgraphExplorer
@microsoftgraphExplorer 4 месяца назад
@@binoysankar2281 yes you can do that using delegated permissions. Check the GET application API endpoint and use that delegated permission. Thanks for watching the video. I will make a video on this soon. Stay tuned.
@binoysankar2281
@binoysankar2281 4 месяца назад
@@microsoftgraphExplorer Great a video would be perfect. Thanks for your time 👍🏽
@johnlomonaco5334
@johnlomonaco5334 Год назад
Hi. I am not getting endDateTime when I chose my condition even though it's parsing the JSON correctly. All I see when I choose Items is "endsWith." Any suggestions? Thanks!
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Your password credential array must be empty, I would recommend you to test with only one app first and validate if everything works as expected, You can use filter to test with one app, top=1 or displayname = yourAppName.
@LovelyJoyOrola
@LovelyJoyOrola Год назад
Hi @Graph Explorer. Can we send those expired secrets to the owner of the application? And what is the purpose of adding on false condition?🙂
@santoshsavakar9764
@santoshsavakar9764 Год назад
How we can do Azure SAML Certificate Expiry alert notification
@joneslt
@joneslt 9 месяцев назад
I'm not seeing that same screen when I choose to create a logic app through the azure portal. It doesn't let me set a recurrence and doesn't give me other options that you are seeing. You must be using some special logic app designer tool? I googled around but can't seem to find much about the designer tool. No explanation on how to access or use that tool makes this a very confusing video
@microsoftgraphExplorer
@microsoftgraphExplorer 9 месяцев назад
Hi Jone, I believe the video is pretty old and Microsoft has changed few visuals since I last created this video
@LovelyJoyOrola
@LovelyJoyOrola Год назад
Hi. Can we send those expired secrets to the owner of the application?
@H_Raja
@H_Raja Год назад
Can this work also for SPN/Certificates expiring.
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Yes
@Raghavendraprasadnightfox
@Raghavendraprasadnightfox Год назад
Hello, Do we hae any option to generate report of the certificate going to expire in 30days
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Absolutely you can customize the logic to give such reports.
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
You can put same script in PowerShell and then use export cmdet from PowerShell to save those records
@playboy71322
@playboy71322 Год назад
To be able to programmatically deploy this would be clutch.
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
You can use Azure function to implement this using the code
@nvlddmkm1282
@nvlddmkm1282 11 месяцев назад
This seems subject to a lot of room for error judging by the comments and my issues as well, due to the JSON parsing step. For example, when setting variables in the foreach loop, there're multiple issues here in the comment section where variables aren't available from dynamic content, even though the data is in the output - I can't set passwordCredentials even though it returned in the JSON output, same with endDate, it's not showing up even though it output.
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Updated tutorial here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@dimmnutbutter1403
@dimmnutbutter1403 4 месяца назад
I insert this expression item()?['endDateTime']
@microsoftgraphExplorer
@microsoftgraphExplorer 4 месяца назад
@@dimmnutbutter1403 have a look at the part 2 that I created to solve all the doubts ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.htmlsi=TQSHl8tYEYHqaSEt
@mdyaser2967
@mdyaser2967 Год назад
Can you help to create a video on how to get enterprise apps certificate expiration dates. Appreciate your help
@microsoftgraphExplorer
@microsoftgraphExplorer 4 месяца назад
Covered in the new video
@akankshnethi1
@akankshnethi1 9 месяцев назад
This was quite helpful, Would love an updated tutorial 😊😊
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Part Two is here the updated tutorial ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@mdyaser2967
@mdyaser2967 Год назад
Question: I don't get the endatetime value to enter in subject of mail. Do I need to add anything under json. I'm not well verse with postman so did not go through postman steps.
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Your password credential array must be empty, I would recommend you to test with only one app first and validate if everything works as expected, You can use filter to test with one app, top=1 or displayname = yourAppName.
@mdyaser2967
@mdyaser2967 Год назад
Is there any similar way to get the alert configured for certificate expiration dates of sso apps (enterprise apps) ??
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
@@mdyaser2967 /applications gets you all applications including the Enterprise applications
@AllenVisser
@AllenVisser 10 месяцев назад
The logic app works perfectly. But the dynamic values are not showing up in the my emails. What do i need to do to correct the email formatting?
@joyan0001
@joyan0001 8 месяцев назад
Hi Allen, I'm also having same issue. The dynamic values are not showing up in my notification emails
@danielhudson41285
@danielhudson41285 6 месяцев назад
There's an issue with Condition - endDateTime is less than addToTime Not endDateTime isn't available on the last step, whereby you compile your email structure. Be superb if you could help. I've pretty much replicated what you've done on your vid. Cheers
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Updated tutorial here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Updated tutorial here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@georgexenoulis7742
@georgexenoulis7742 6 месяцев назад
I used this and absolutely love this solution. I was curious if we could do one for Enterprise Apps that have App Proxy configured with SSL certs. I am finding this a big demand for us.
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Thank for your positive comments. This motivates me to bring similar contents for our community. Keep working 💪
@akashbamane7665
@akashbamane7665 Год назад
Hello Sir Good Explained. I have question, How can we exclude app proxy application from list of apps so that secret expiration mail will not send to app proxy applications. Thank you in Advance.
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Write a if condition to exclude a specific appid
@joyan0001
@joyan0001 8 месяцев назад
Hi @Graph Explorer, The dynamic values are not showing in the email notifications. Any idea on what may be causing this issue?
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Part Two is here the updated tutorial ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@travel-pagol5724
@travel-pagol5724 Год назад
Hi , I should say it is nice video ! I have a 3 application & i want to get expired information at the same for 3 application secret . Is it Possible ? Can you help me out please
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Yes it is possible, in this example I have more than 20 Applications and it is notifying me about all 20 apps who's secrets are expireing. Please subscribe to my channel if you find it useful. Its motivating that it helped you.
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
The list Applications endpoint list all the applications in the tenant,
@travel-pagol5724
@travel-pagol5724 Год назад
@@microsoftgraphExplorer But how to fix it ? because according to your video we can create one application at the same time Please can you help me out its like emergency for me
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
@@travel-pagol5724 Can you please let me know your end goal so I can suggest you the most appropriately.
@travel-pagol5724
@travel-pagol5724 Год назад
@@microsoftgraphExplorer Hello , is it possible to get notify Application owner automatically . Case Study : I have a one application has owner & 4 of application has no owner so if application has owner , they will get notify automatically via Logic app by email & Applications do not have owner , Tenant owner get notify by email. Do you have any idea regrading this or reference so i can do that . Its my School Project , it will be nice if you help out of this .
@ankitsharma-zp4qk
@ankitsharma-zp4qk Год назад
Thanks a lot Sir for this video!! I am using Microsoft free account. While authentication its throwing me an error saying only work or school accounts are supported. Can we create work/school account for free?
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Tanks for motivation Ankit, Yes you can join it here developer.microsoft.com/en-us/microsoft-365/dev-program Do subscribed the channel if I helped you in any way.
@Bonitoaarons
@Bonitoaarons Год назад
Hi Graph Explorer, I can't seems to get the end DateTime in the email, App name and the location work are all displayed in the email.
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Updated tutorial here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@bryanrogers1587
@bryanrogers1587 Год назад
I followed your steps and it is working fine, however, I did top 3 in the query and it sent mail on only one app, but sent it 3 times. Was there something wrong in the loop?
@bryanrogers1587
@bryanrogers1587 Год назад
oh I see, it sent mail about the already expired old secrets. I will have to add condition to skip those
@sarathkumaras
@sarathkumaras Год назад
Hi Briyan, Please help with the query to get all the expired & about to expiry secrets.
@yuvaneshprabakaran4593
@yuvaneshprabakaran4593 Год назад
Hi does this call includes all applications and can you explain one for certificate as well?
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
I have explained about certificates in this video Part Two is here the updated tutorial ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@tunckeskin1151
@tunckeskin1151 11 месяцев назад
Thanks for the video. I see some other comments mentioned about same thing and it is not very clear. I'm also stuck on Parse JSON step, since there are some app registrations with no secrets or certificate password credential coming up empty for those. And Parse JSON step errors out and can't move forward. I see that you mentioned "Just put an additional condition to check if the array is empty, if empty then skip that iteration" below comment but can you please clarify and give details on this how to proceed?
@tunckeskin1151
@tunckeskin1151 11 месяцев назад
Actually it was easy solution. Sharing for people having the same issue. I edited the schema in Parse JSON. Under "passwordCredentials", changed "type": ["string"] to "type": ["string","null"]
@nvlddmkm1282
@nvlddmkm1282 11 месяцев назад
@@tunckeskin1151 I'm having the same issue, but my schema passwordCredentials is "type": "array" - trying ["array","null"] or ["string","null"] still returns the same issue. I think this method they're showing is way too subject to error depending on the application registrations people use. I found another video that doesn't rely on loops and uses XML/xpath to parse all the data, much more seamless and effective.
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Updated tutorial here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vjPihv2CnwA.html
@lovelyjoyorola6422
@lovelyjoyorola6422 3 месяца назад
@@tunckeskin1151 where you get the schema for parse json
@sourabhkct
@sourabhkct Год назад
I think the solution or the logic app does not move forward if password credential is empty for first app registration, any idea to solve this case?
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Just put an additional condition to check if the array is empty, if empty then skip that iteration. I hope that helps.
@bryanrogers1587
@bryanrogers1587 Год назад
@@microsoftgraphExplorer I am hitting this issue in the Parse JSON step, so would it be a conditional check step before that? Not picturing it ATM
@turki5321
@turki5321 Год назад
me to i can't solve this issue and i try to do my best but it's not clear to me hope there is document to share with fix this issue@@bryanrogers1587
@jameseduard2092
@jameseduard2092 Год назад
If you can create Repo for this should be good thanks and nice tutorials
@microsoftgraphExplorer
@microsoftgraphExplorer 5 месяцев назад
Repo can be found here in description
@LovelyJoyOrola
@LovelyJoyOrola Год назад
Hi. Can I change the recipient in sending the email? Because in our tenant there are multiple users who are using it. And can I also change the sender because as I can see, the recipient will see that the email is from me? Can I use Microsoft Azure as the sender or Microsoft?
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Yes You can use a DL in that case.
@LovelyJoyOrola
@LovelyJoyOrola Год назад
@@microsoftgraphExplorer may I know what is DL. I am new to this platform, bear with me :)
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
@@LovelyJoyOrola I am sorry Joy. A DL is like a Group also known as distribution group which has a common mail address, so once you send an email to that email address, all the recipient get that mail.
@LovelyJoyOrola
@LovelyJoyOrola Год назад
@@microsoftgraphExplorer Hi. I'm getting another for each loop when I add a set variable for displayName and passwordCredential. Can you help me with this
@saivaruntejapagadala
@saivaruntejapagadala Год назад
very useful video can we do with in one email
@microsoftgraphExplorer
@microsoftgraphExplorer Год назад
Yes, in that case you will have to remove the email logic and put it in the end.
@saivaruntejapagadala
@saivaruntejapagadala Год назад
@@microsoftgraphExplorer if you have time can we connect for 10 mins
@sarathkumaras
@sarathkumaras Год назад
​@@microsoftgraphExplorercan you share your expertise on getting the complete expiry details in single email please sir
Далее
Учёные из Тринидад и Тобаго
00:23
Logic Apps for Everyone - A complete guide for anyone!
50:37
Power Apps Model Driven Apps FULL COURSE for Beginners
3:23:34
Учёные из Тринидад и Тобаго
00:23