azuread / deployment-plans Goto Github PK

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/whats-new

Looks like they have changed the:
ConditionalAccessStatus == 1
to
ConditionalAccessStatus == "success"

The CA queries need to be updated.

This no longer produces any data - which breaks the MFA related dashboards:

|mvexpand ConditionalAccessPolicies
|extend CAGrantControlName = tostring(ConditionalAccessPolicies.enforcedGrantControls[0])
|extend CAPolicyName = tostring(ConditionalAccessPolicies.displayName )
|extend CAPolicyResult = toint(ConditionalAccessPolicies.result)

Hello,

All the process is successfully done but when i try to refresh from the dashboard Tab on Excel, i can't see any data.
All tab are empty and not data are loaded from csv file.

Could anyone assist me on this please?

Many thanks in advance.

In the readme - "First, complete the steps to route the Azure AD activity logs to your Log Analytics workspace"

In lines 1208 and 1219 : "$AdfsRelyingPartyTrust | Export-Clixml $filePath -ErrorAction SilentlyContinue" failed
You have to add "$AdfsClaimsProviderTrust | Export-Clixml -literalpath $filePath -ErrorAction SilentlyContinue"

When I try to import the views it gives me an error stating that the views are not valid. This happens with both Azure AD Account Provisioning Events.omsview and the AzureADSignins.omsview files.

I have run the script no the ADFS server and it has generated the CSVs with the data. However, when I click on refresh button it is failing to load that data. Upon further analysis I suspect it to be something associated with the formatting issue how the data is getting generated and then loaded, because if I pick and load the data manually it works.

Please assist.

Thanks in advance!

Getting a lot of errors when running Test-ADFS2AADOnPremRPTrustSet -RPXMLFileDirectory "C:\adfs\apps" The first two commands proceed without error very quickly. The CSV files, folder structure and resulting ZIP file are all created. I ran the script on my ADFS 3.0 server directly.

As a suggestion, this powershell module would benefit from the addition of error handling logic to output to an error log file for easier review later on.

Running the third command, the script essentially repeats these sections over and over as errors:

**The property 'TestName' cannot be found on this object. Verify that the property exists and can be set.
At C:\adfs\ADFSAADMigrationUtils.psm1:779 char:9
+         $result.TestName = $function
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
    + FullyQualifiedErrorId : PropertyNotFound

The property 'ADFSObjectType' cannot be found on this object. Verify that the property exists and can be set.
At C:\adfs\ADFSAADMigrationUtils.psm1:780 char:9
+         $result.ADFSObjectType = "Relying Party"
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
    + FullyQualifiedErrorId : PropertyNotFound

The property 'ADFSObjectIdentifier' cannot be found on this object. Verify that the property exists and can be set.
At C:\adfs\ADFSAADMigrationUtils.psm1:781 char:9
+         $result.ADFSObjectIdentifier = $ADFSRelyingPartyTrust.Name
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
    + FullyQualifiedErrorId : PropertyNotFound

Test-ADFSRPRuleset : Cannot process argument transformation on parameter 'ResultTypeIfUnknownPattern'. Cannot convert
value "Warning" to type "ResultType". Error: "Unable to match the identifier name Warning to a valid enumerator name.
Specify one of the following enumerator names and try again:
Pass, Fail, NotRun"
At C:\adfs\ADFSAADMigrationUtils.psm1:417 char:37
+         -ResultTypeIfUnknownPattern Warning
+                                     ~~~~~~~
    + CategoryInfo          : InvalidData: (:) [Test-ADFSRPRuleset], ParameterBindingArgumentTransformationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Test-ADFSRPRuleset**

Thanks!
I will continue to run some debug on my own as well, though I'm not a power scripter :-) Once I get past these errors I suspect this script will be exactly what I'm looking for!

Is there way to display extended attributes in the queries, does the schema expose these?

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-directory-extensions

I am getting prompted for paramaters when running: Test-ADFS2AADOnPremRPTrustSet -RPXMLFileDirectory "C:\adfs\apps"

RulesetName:
KnownRules:
ResultTypeIfUnknownPattern:

So no csv exports is occurring.

When I run the following command
Test-ADFS2AADOnPremRPTrustSet -RPXMLFileDirectory "C:\adfs\apps"

I get this but the instructions or commands have no mention of what is being looked for:
PS C:\temp> Test-ADFS2AADOnPremRPTrustSet -RPXMLFileDirectory "C:\adfs\apps"

cmdlet Test-ADFSRPRuleset at command pipeline position 1
Supply values for the following parameters:
RulesetName:
KnownRules:
ResultTypeIfUnknownPattern:

should be ADFSAADMigrationUtils.psm1 (note the addition of an "i")

How do I see the "refresh data" in the dashboard tab that doesn't seem to exist?

Is it possible to have a view of signin locations per app on a map?

After pressing 'Refresh Data' button I went to a AAD App Migration Report tab.

All cells under C-column 'Notes of Failure/Warning' display #NAME? instead of describing the issue.

How this can be fixed? Report has no value if there is no further information available about the issues detected

I am trying to follow the instructions in the readme.md file for the ADFSAADMigrationUtils and I have run the 3 cmdlets to generate 5 CSV files. The instructions then say "From this same workstation, open this Excel spreadsheet and navigate to the Dashboard tab and hit the Refresh Data button on the right."

What is the name of "this Excel spreadsheet"?