> ## Documentation Index
> Fetch the complete documentation index at: https://ps365.clidsys.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get MgApplicationSAML

## SYNOPSIS

Retrieves all Entra ID applications configured for SAML SSO.

## SYNTAX

### All (Default)

```powershell theme={null}
Get-MgApplicationSAML [-ForceNewToken] [-ExportToExcel] [-ExportPath <String>] [-RunFromAzureAutomation]
 [-ExpirationThresholdDays <Int32>] [-NotificationRecipient <String>] [-NotificationSender <String>]
 [-IncludeSignInStats] [-DisableParallel] [-ThrottleLimit <Int32>] [-ProgressAction <ActionPreference>]
 [<CommonParameters>]
```

### ByObjectId

```powershell theme={null}
Get-MgApplicationSAML [-ObjectID <String>] [-ForceNewToken] [-ExportToExcel] [-ExportPath <String>]
 [-RunFromAzureAutomation] [-ExpirationThresholdDays <Int32>] [-NotificationRecipient <String>]
 [-NotificationSender <String>] [-IncludeSignInStats] [-DisableParallel] [-ThrottleLimit <Int32>]
 [-ProgressAction <ActionPreference>] [<CommonParameters>]
```

### ByDisplayName

```powershell theme={null}
Get-MgApplicationSAML [-DisplayName <String>] [-ForceNewToken] [-ExportToExcel] [-ExportPath <String>]
 [-RunFromAzureAutomation] [-ExpirationThresholdDays <Int32>] [-NotificationRecipient <String>]
 [-NotificationSender <String>] [-IncludeSignInStats] [-DisableParallel] [-ThrottleLimit <Int32>]
 [-ProgressAction <ActionPreference>] [<CommonParameters>]
```

## DESCRIPTION

This function returns a list of all Entra ID applications configured for SAML Single Sign-On
along with their SAML-related properties.
Each row represents one SAML signing certificate
(KeyCredential with Usage 'Sign'), so an application with multiple certificates will appear
on multiple rows.

The `SamlSigningCertificateIsPreferred` column identifies the currently active certificate:

* True  : this is the active signing certificate
* False : this certificate exists on the application but is not currently active

## EXAMPLES

### EXAMPLE 1

```powershell theme={null}
Get-MgApplicationSAML
```

Retrieves all Entra ID applications configured for SAML SSO.

### EXAMPLE 2

```powershell theme={null}
Get-MgApplicationSAML -DisableParallel
```

Forces sequential processing even on PowerShell 7+ (useful for debugging or to avoid concurrent Graph calls).

### EXAMPLE 3

```powershell theme={null}
Get-MgApplicationSAML -IncludeSignInStats
```

Retrieves all Entra ID applications configured for SAML SSO with sign-in statistics for the last 30 days.

### EXAMPLE 4

```powershell theme={null}
Get-MgApplicationSAML -ObjectID "xxx-xxx-xxx"
```

Retrieves the SAML configuration for a specific application by its ObjectID.

### EXAMPLE 5

```powershell theme={null}
Get-MgApplicationSAML -DisplayName "My SAML App"
```

Retrieves the SAML configuration for a specific application by its DisplayName.

### EXAMPLE 6

```powershell theme={null}
Get-MgApplicationSAML -DisplayName "Azure*"
```

Retrieves the SAML configuration for all applications whose DisplayName starts with "Azure".

### EXAMPLE 7

```powershell theme={null}
Get-MgApplicationSAML -DisplayName "*Portal*"
```

Retrieves the SAML configuration for all applications whose DisplayName contains "Portal".

### EXAMPLE 8

```powershell theme={null}
Get-MgApplicationSAML -ForceNewToken
```

Forces the function to disconnect and reconnect to Microsoft Graph to obtain a new access token.

### EXAMPLE 9

```powershell theme={null}
Get-MgApplicationSAML -ExportToExcel
```

Gets all SAML applications and exports them to an Excel file.

### EXAMPLE 10

```powershell theme={null}
Get-MgApplicationSAML -RunFromAzureAutomation -ExpirationThresholdDays 30 -NotificationRecipient 'admin@company.com' -NotificationSender 'automation@company.com'
```

Gets all SAML applications using managed identity authentication and sends notification for certificates expiring within 30 days.

### EXAMPLE 11

```powershell theme={null}
Get-MgApplicationSAML -RunFromAzureAutomation -ExpirationThresholdDays 7 -NotificationRecipient 'admin@company.com' -NotificationSender 'automation@company.com'
```

Gets all SAML applications using managed identity and sends email notification for certificates expiring within 7 days.

## PARAMETERS

### -ObjectID

(Optional) Retrieves the SAML configuration for a specific application by its ObjectID.

```yaml theme={null}
Type: String
Parameter Sets: ByObjectId
Aliases: Identity

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -DisplayName

(Optional) Retrieves the SAML configuration for a specific application by its DisplayName.
Supports wildcards (\* and ?) for partial name matching (e.g.
"Azure\*", "*Portal*").

```yaml theme={null}
Type: String
Parameter Sets: ByDisplayName
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -ForceNewToken

(Optional) Forces the function to disconnect and reconnect to Microsoft Graph to obtain a new access token.

```yaml theme={null}
Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -ExportToExcel

(Optional) If specified, exports the results to an Excel file in the user's profile directory.

```yaml theme={null}
Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -ExportPath

Optional output directory for the Excel export (defaults to the user profile).

```yaml theme={null}
Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -RunFromAzureAutomation

(Optional) If specified, uses managed identity authentication instead of interactive authentication.
This is useful when running the script in Azure environments like Azure Functions, Logic Apps, or VMs with managed identity enabled.
When this parameter is used, ExpirationThresholdDays, NotificationRecipient and NotificationSender are required.

PowerShell modules used in Azure Automation must be a MAXIMUM of version 2.25.0 when using PowerShell \< 7.4.0, because starting from version 2.26.0, PowerShell 7.4.0 is required, and Azure Automation does not support it yet as of February 2026.
For PowerShell 7.4.0+, there are no version restrictions.
[https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/3147](https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/3147)
[https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/3151](https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/3151)
[https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/3166](https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/3166)

```yaml theme={null}
Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -ExpirationThresholdDays

(Required when RunFromAzureAutomation is enabled) Number of days threshold for expiration notification.
Default is 30 days.

```yaml theme={null}
Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: 30
Accept pipeline input: False
Accept wildcard characters: False
```

### -NotificationRecipient

(Required when RunFromAzureAutomation is enabled) Email address to receive expiration notifications.

```yaml theme={null}
Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -NotificationSender

(Required when RunFromAzureAutomation is enabled) Email address of the sender for expiration notifications.

```yaml theme={null}
Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -IncludeSignInStats

(Optional) If specified, includes sign-in statistics for the last 30 days for each application.
Requires AuditLog.Read.All permission.
Please be advised that this process is time-consuming.

```yaml theme={null}
Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -DisableParallel

(Optional) Forces sequential processing.
By default, on PowerShell 7+ the function processes SAML applications in
parallel (ForEach-Object -Parallel) to speed up discovery; on PowerShell 5.1 it always runs sequentially.

```yaml theme={null}
Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -ThrottleLimit

(Optional) Maximum number of concurrent runspaces when running in parallel.
Default is 5.
Keep this value moderate to avoid Microsoft Graph throttling (HTTP 429).

```yaml theme={null}
Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: 5
Accept pipeline input: False
Accept wildcard characters: False
```

### CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about\_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).

## INPUTS

## OUTPUTS

## NOTES

Limitations:
The information about the SAML applications clams is not available in the Microsoft Graph API v1 but in [https://main.iam.ad.ext.azure.com/api/ApplicationSso/\&lt;service-principal-id\&gt;/FederatedSsoV2](https://main.iam.ad.ext.azure.com/api/ApplicationSso/\&lt;service-principal-id\&gt;/FederatedSsoV2) so we don't get them

## RELATED LINKS

[https://ps365.clidsys.com/docs/commands/Get-MgApplicationSAML](https://ps365.clidsys.com/docs/commands/Get-MgApplicationSAML)