Tom Bamford

microsoft: support client_credentials flow using client assertions

4

Resolves #465 **Usage** ```go conf := microsoft.Config{ ClientID: clientId, PrivateKey: []byte("my_encoded_private_key"), Certificate: []byte("my_encoded_certificate"), Scopes: []string{"https://graph.microsoft.com/.default"}, TokenURL: microsoft.AzureADEndpoint(tenantId).TokenURL, } ts := conf.TokenSource(context.Background()) ``` **Documentation** - https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow#second-case-access-token-request-with-a-certificate - https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-certificate-credentials

Support client_credentials flow with Microsoft Identity Platform v2.0 using client assertions

2

- Commonly referred to as Client Certificate authentication - I'm not sure if this follows a particular standard, but it's similar to client_credentials flow but signing a JWT for identity...

### SDK version ``` github.com/hashicorp/terraform-plugin-sdk/v2 v2.7.0 ``` ### Use-cases In a CustomizeDiff function, it would be nice to be able to reliably test for a value that is unknown at...

Fixes #857

Strategy for 1.0 and beta API features

3

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritise this request * Please do...

See #474 for context

graphrbac: property 'samlToken' does not exist on type 'Microsoft.DirectoryServices.OptionalClaims'

5

### Bug Report - `github.com/Azure/azure-sdk-for-go/services/graphrbac/1.6/graphrbac` - `v42.1.0` - `go version go1.14.2 darwin/amd64` I'm trying to include `OptionalClaims` when creating an Application. I can submit claims for `AccessToken` and `IDToken`, but...

Support for configuring a new domain/forest

2

### Description You can install and configure Domain Services with Powershell. Certainly the initial setup is possible, although I'm not sure how updatable it is. ### Example PowerShell **Preamble /...

Closes #866

AAD: DiagnosticSettings API does not support bearer auth using a service principal

12

Attempting to create an AAD Diagnostic Setting using the `aad/mgmt/2017-04-01/aad` package, and it appears the API does not support authenticating as a service principal. I have assigned the Global Admin...