Wrong Powershell example.

[joostjansenskg]

On the website their is an powershell example:

{
  "displayName": "Name",
  "state": "enabled OR disabled OR enabledForReportingButNotEnforced",
  "conditions": {
    "applications": {
      "includeApplications": [
        "All"
      ]
    },
    "clientApplications": {
      "includeServicePrincipals": [
        "[Service principal Object ID] OR ServicePrincipalsInMyTenant"
      ],
      "excludeServicePrincipals": [
        "[Service principal Object ID]"
      ],
    },
    "locations": {
      "includeLocations": [
        "All"
      ],
      "excludeLocations": [
        "[Named location ID] OR AllTrusted"
      ]
    }
  },
  "grantControls": {
    "operator": "and",
    "builtInControls": [
      "block"
    ]
  }
}

But it contains a mistake. The last comma behind

 "excludeServicePrincipals": [
        "[Service principal Object ID]"
      ], 

Must be deleted.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 60d23869-94f5-22cc-425e-4bf675d84ce0
• Version Independent ID: 5105047f-04bf-87ef-ee8e-3e9bf9b5ac3a
• Content: Azure Active Directory Conditional Access for workload identities preview - Microsoft Entra
• Content Source: articles/active-directory/conditional-access/workload-identity.md
• Service: active-directory
• Sub-service: conditional-access
• GitHub Login: @MicrosoftGuyJFlo
• Microsoft Alias: joflore

[MicrosoftGuyJFlo]

#reassign:@MicrosoftGuyJFlo

So @joostjansenskg your recommendation is

{
  "displayName": "Name",
  "state": "enabled OR disabled OR enabledForReportingButNotEnforced",
  "conditions": {
    "applications": {
      "includeApplications": [
        "All"
      ]
    },
    "clientApplications": {
      "includeServicePrincipals": [
        "[Service principal Object ID] OR ServicePrincipalsInMyTenant"
      ],
      "excludeServicePrincipals": [
        "[Service principal Object ID]"
      ]
    },
    "locations": {
      "includeLocations": [
        "All"
      ],
      "excludeLocations": [
        "[Named location ID] OR AllTrusted"
      ]
    }
  },
  "grantControls": {
    "operator": "and",
    "builtInControls": [
      "block"
    ]
  }
}

[SaibabaBalapur-MSFT]

@joostjansenskg Thanks for your feedback! We will investigate and update as appropriate.

[YashikaTyagii]

@joostjansenskg Could you confirm on above ask from @MicrosoftGuyJFlo ?

[joostjansenskg]

Yes correct.

[YashikaTyagii]

@MicrosoftGuyJFlo If you agree with this recommendation by @joostjansenskg. Please provide your feedback.

[MicrosoftGuyJFlo]

#unassign:@YashikaTyagi-MSFT

[MicrosoftGuyJFlo]

Resolving with a PR in our private repo

[MicrosoftGuyJFlo]

#label:"assigned-to-author"