az cli unable to --set for "Sign on URL" for SAML Enterprise App/Service Principal

[nickadams675]

version 2.5.1

Describe the bug
Hello, I am working to leverage either "az rest" or "az ad sp --set" to update the field for what is showing in the Azure Portal as "Sign on URL" under:
Enterprise Applications>Single sign-on>SAML>"Basic SAML Configuration"> "Sign on URL"

To Reproduce
az ad show --id <application_id>
This is missing an element/object for "Sign on URL"

Expected behavior
Using az rest or az ad sp --set should be able to add data to this field

Environment summary
Mac OS, az-cli version 2.5.1

Additional context
This data also appears to not be listed in the Application Registration Manifest either.

Thanks!

[yonzhan]

add to S170

[jiasli]

Hi @nickadams675, as AAD is not actively maintaining the AD Graph 1.6 API anymore. Could you check #12946 and see if this can be done via az rest and Microsoft Graph API?

[nickadams675]

@jiasli thanks for the reply!

I don't see an object/property to support a field such as "Entity ID" that I could use -m PATCH on:

$ az rest -m GET -u https://graph.microsoft.com/beta/servicePrincipals/redcacted
{
  "@odata.context": "https://graph.microsoft.com/beta/$metadata#servicePrincipals/$entity",
  "accountEnabled": true,
  "addIns": [],
  "alternativeNames": [],
  "api": {
    "resourceSpecificApplicationPermissions": []
  },
  "appDescription": null,
  "appDisplayName": "redacted",
  "appId": "redacted",
  "appOwnerOrganizationId": "redacted",
  "appRoleAssignmentRequired": false,
  "appRoles": [
    {
      "allowedMemberTypes": [
        "User"
      ],
      "description": "User",
      "displayName": "User",
      "id": "b3ee91b8-c12a-492d-82ab-972155ea58d8",
      "isEnabled": true,
      "origin": "Application",
      "value": ""
    },
    {
      "allowedMemberTypes": [
        "User"
      ],
      "description": "msiam_access",
      "displayName": "msiam_access",
      "id": "f66f118e-2896-4510-bf97-482bf190691b",
      "isEnabled": true,
      "origin": "Application",
      "value": ""
    }
  ],
  "applicationTemplateId": null,
  "deletedDateTime": null,
  "description": null,
  "displayName": "redacted",
  "errorUrl": null,
  "homepage": "https://redacted",
  "id": "redacted",
  "info": {
    "logoUrl": null,
    "marketingUrl": null,
    "privacyStatementUrl": null,
    "supportUrl": null,
    "termsOfServiceUrl": null
  },
  "isAuthorizationServiceEnabled": false,
  "keyCredentials": [
    {
      "customKeyIdentifier": "5etutkqotIzneUXV27ri42HeO1hpWOPj+GS+4eDAWi4=",
      "displayName": "CN=Microsoft Azure Federated SSO Certificate",
      "endDateTime": "2023-05-15T16:21:01Z",
      "key": null,
      "keyId": "65924f00-46f9-4ef8-bb4d-2182646c6435",
      "startDateTime": "2020-05-15T16:21:01Z",
      "type": "AsymmetricX509Cert",
      "usage": "Verify"
    },
    {
      "customKeyIdentifier": "5etutkqotIzneUXV27ri42HeO1hpWOPj+GS+4eDAWi4=",
      "displayName": "CN=Microsoft Azure Federated SSO Certificate",
      "endDateTime": "2023-05-15T16:21:01Z",
      "key": null,
      "keyId": "18a9b35d-13a0-4c6f-96b5-dee067ecaf8f",
      "startDateTime": "2020-05-15T16:21:01Z",
      "type": "AsymmetricX509Cert",
      "usage": "Sign"
    }
  ],
  "loginUrl": null,
  "logoutUrl": null,
  "notes": null,
  "notificationEmailAddresses": [],
  "passwordCredentials": [
    {
      "customKeyIdentifier": "5etutkqotIzneUXV27ri42HeO1hpWOPj+GS+4eDAWi4=",
      "displayName": "CN=Microsoft Azure Federated SSO Certificate",
      "endDateTime": "2023-05-15T16:21:01Z",
      "hint": null,
      "keyId": "18a9b35d-13a0-4c6f-96b5-dee067ecaf8f",
      "secretText": null,
      "startDateTime": "2020-05-15T16:21:01Z"
    }
  ],
  "preferredSingleSignOnMode": "saml",
  "preferredTokenSigningKeyEndDateTime": "2023-05-15T16:21:01Z",
  "preferredTokenSigningKeyThumbprint": "00743095C6CB5C4875B426EAA8429685DA26F15A",
  "publishedPermissionScopes": [
    {
      "adminConsentDescription": "Allow the application to access CPC-PROD-VCD-S632836SL7A on behalf of the signed-in user.",
      "adminConsentDisplayName": "Access CPC-PROD-VCD-S632836SL7A",
      "id": "e08de71f-948f-4a16-8184-7f6db1760020",
      "isEnabled": true,
      "type": "User",
      "userConsentDescription": "Allow the application to access CPC-PROD-VCD-S632836SL7A on your behalf.",
      "userConsentDisplayName": "Access CPC-PROD-VCD-S632836SL7A",
      "value": "user_impersonation"
    }
  ],
  "publisherName": "redacted",
  "replyUrls": [
    "https://redacted",
    "https://redacted",
    "https://redacted",
    "https://redacted"
  ],
  "samlMetadataUrl": null,
  "samlSingleSignOnSettings": null,
  "servicePrincipalNames": [
    "redacted",
    "v"
  ],
  "servicePrincipalType": "Application",
  "signInAudience": "AzureADMyOrg",
  "tags": [
    "WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1",
    "WindowsAzureActiveDirectoryIntegratedApp",
    "WindowsAzureActiveDirectoryCustomSingleSignOnApplication"
  ],
  "tokenEncryptionKeyId": null,
  "verifiedPublisher": {
    "addedDateTime": null,
    "displayName": null,
    "verifiedPublisherId": null
  }
}

I may have missed it though.

Thanks!

[jiasli]

@nickadams675, do you mind creating a support request in Azure Portal for AAD? I'd like to help but I am not quite familiar with the latest Microsoft Graph API. Thanks for understanding.