Skip to content

Commit c5ad755

Browse files
authored
Merge pull request MicrosoftDocs#6186 from leewisestamp/patch-1
Update app-only-auth-powershell-v2.md
2 parents b054e2c + 012fc9a commit c5ad755

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

exchange/docs-conceptual/app-only-auth-powershell-v2.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ To update from an earlier version of the of the EXO V2 module, run the following
3434
Update-Module -Name ExchangeOnlineManagement -RequiredVersion 2.0.3-Preview -AllowPrerelease
3535
```
3636

37-
Auditing and reporting scenarios in Exchange Online often involve scripts that run unattended. In most cases, these unattended scripts access Exchange Online PowerShell using Basic authentication (a username and password). Even when the connection to Exchange Online PowerShell uses modern authentication, the credentials are stored in a local file or a secret vault that's access at run-time.
37+
Auditing and reporting scenarios in Exchange Online often involve scripts that run unattended. In most cases, these unattended scripts access Exchange Online PowerShell using Basic authentication (a username and password). Even when the connection to Exchange Online PowerShell uses modern authentication, the credentials are stored in a local file or a secret vault that's accessed at run-time.
3838

3939
Because storing user credentials locally is not a safe practice, we're releasing this feature to support authentication for unattended scripts (automation) scenarios using AzureAD applications and self-signed certificates.
4040

@@ -72,13 +72,13 @@ The following examples show how to use the Exchange Online PowerShell V2 module
7272
7373
## How does it work?
7474
75-
The EXO V2 module uses the Active Directory Authentication Library to fetch an app-only token using the application Id, tenant Id & certificate thumbprint. The application object provisioned inside Azure AD has a Directory Role assigned to it, which is returned in the access token. Exchange Online configures the session RBAC using the directory role information that's available in the token.
75+
The EXO V2 module uses the Active Directory Authentication Library to fetch an app-only token using the application Id, tenant Id (organization), and certificate thumbprint. The application object provisioned inside Azure AD has a Directory Role assigned to it, which is returned in the access token. Exchange Online configures the session RBAC using the directory role information that's available in the token.
7676
7777
## Setup app-only authentication
7878
7979
An initial onboarding is required for authentication using application objects. Application and service principal are used interchangeably, but an application is like a class object while a service principal is like an instance of the class. You can learn more about this at [Application and service principal objects in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/develop/app-objects-and-service-principals).
8080
81-
For a detailed visual flow bout creating applications in Azure AD, see <https://aka.ms/azuread-app>.
81+
For a detailed visual flow about creating applications in Azure AD, see <https://aka.ms/azuread-app>.
8282
8383
1. Register the application in Azure AD at <https://portal.azure.com>.
8484

0 commit comments

Comments
 (0)