Note: PowerShell integration requires a ShareGate Migrate Pro or Enterprise subscription. It is not available on the Essentials plan.
Command
New-AzureApplication
Description
This command creates an Azure AD application authentication object that other ShareGate commands can use to authenticate against Microsoft 365.
You can provide the authentication using one of two methods: an X.509 certificate, or the thumbprint of a certificate stored in the Windows Certificate Store.
Examples
Create using a certificate from the certificate store
$cert = Get-Item Cert:\CurrentUser\My\1A2B3C4D5E6F7A8B9C0D1E2F3A4B5C6D7E8F9A0B
$azureApp = New-AzureApplication -ClientId 11111111-2222-3333-4444-555555555555 -Certificate $cert
Create from a certificate thumbprint in the Windows Certificate Store
$azureApp = New-AzureApplication -ClientId 11111111-2222-3333-4444-555555555555 -Thumbprint 1A2B3C4D5E6F7A8B9C0D1E2F3A4B5C6D7E8F9A0B
Create from a thumbprint located in the LocalMachine store
$azureApp = New-AzureApplication -ClientId 11111111-2222-3333-4444-555555555555 -Thumbprint 1A2B3C4D5E6F7A8B9C0D1E2F3A4B5C6D7E8F9A0B -CertificateStoreLocation LocalMachine -CertificateStoreName My
Syntax
New-AzureApplication
-ClientId <String>
-Certificate <X509Certificate2>
[-Name <String>]
New-AzureApplication
-ClientId <String>
-Thumbprint <String>
[-CertificateStoreLocation <StoreLocation>]
[-CertificateStoreName <StoreName>]
[-Name <String>]
Parameters
-Certificate <X509Certificate2>
The X.509 certificate used to authenticate.
Required? | True |
Default value | None |
Accept pipeline input? | True (ByValue) |
Accept wildcard characters? | False |
Parameter set name | Certificate |
Aliases | None |
-CertificateStoreLocation <StoreLocation>
The Windows Certificate Store location. Defaults to CurrentUser.
Required? | False |
Default value | CurrentUser |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Parameter set name | Thumbprint |
Aliases | None |
-CertificateStoreName <StoreName>
The Windows Certificate Store name. Defaults to My.
Required? | False |
Default value | My |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Parameter set name | Thumbprint |
Aliases | None |
-ClientId <String>
The Azure AD App Registration client ID.
Required? | True |
Default value | None |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Parameter set name | (All) |
Aliases | None |
-Name <String>
An optional friendly name for the Azure application. Used as a hint by Save-AzureApplication.
Required? | False |
Default value | None |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Parameter set name | (All) |
Aliases | None |
-Thumbprint <String>
The thumbprint of a certificate in the Windows Certificate Store.
Required? | True |
Default value | None |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Parameter set name | Thumbprint |
Aliases | None |
