Skip to main content

​
Get-MgApplicationExpiringCertAndKey

​
SYNOPSIS

Retrieves Entra ID applications with expiring credentials or SAML certificates.

​
SYNTAX

​
DESCRIPTION

This function identifies all Entra ID applications that have credentials (keys/passwords) or SAML signing certificates that will expire within a specified number of days. It combines data from both regular application credentials and SAML-specific certificates to provide a comprehensive view of expiring security components.

​
EXAMPLES

​
EXAMPLE 1

Retrieves all applications with credentials or SAML certificates expiring within the next 30 days.

​
EXAMPLE 2

Retrieves the expiring credentials using the Graph JSON $batch endpoint for the underlying functions.

​
EXAMPLE 3

Retrieves all applications with credentials or SAML certificates expiring within the next 7 days.

​
EXAMPLE 4

Gets all applications with credentials expiring within 60 days and exports to Excel.

​
PARAMETERS

​
-DaysUntilExpiry

The number of days to check for expiring credentials. Applications with credentials expiring within this timeframe will be returned. Default is 30 days.

​
-ExportPath

Optional output directory for the Excel export (defaults to the user profile).

​
-ExportToExcel

Exports the results to an Excel file.

​
-ForceNewToken

Not documented.

​
-UseBatchRequest

(Optional) Passed through to Get-MgApplicationCredential and Get-MgApplicationSAML: uses the Microsoft Graph JSON $batch endpoint (20 requests per HTTP call with automatic HTTP 429 retry) instead of ForEach-Object -Parallel.

​
CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

​
INPUTS

​
OUTPUTS

​
NOTES

This function requires both Get-MgApplicationCredential and Get-MgApplicationSAML functions to be available. Author: Bastien Perez