msgraph-sdk-powershell icon indicating copy to clipboard operation
msgraph-sdk-powershell copied to clipboard

Double Authentication for Delegated Permission Use on 2.26 or Newer

Open nkasco opened this issue 6 months ago • 4 comments

Describe the bug

When using Connect-MgGraph simply with the default Graph PowerShell Enterprise App on any version 2.26 or newer, specifically, when using with delegated permissions there seems to be an intermittent double auth prompt. I can't repro this at will, but I've confirmed it in both my corporate environment, personal PC environment, and corroborated with members of the PowerShell community via discord who also confirmed they've seen it as well.

Expected behavior

Single auth prompt should be persistent for the length of the PowerShell process session unless Disconnect-MgGraph is otherwise called.

How to reproduce

  1. Connect-MgGraph (no other parameters are required to repro since this is delegated permission use with auth code flow on the default Graph PowerShell enterprise app)
  2. Auth like normal using an account that has access and proper AAD role for delegated permission use (such as Directory.ReadWrite.All)
  3. After successful auth, run a subsequent cmdlet from the module (e.g. Get-MgDevice)
  4. Intermittently, it will prompt for auth again

SDK Version

2.26

Latest version known to work for scenario above?

2.25

Known Workarounds

Deal with double authentication prompts.

Debug output

No response

Configuration

No response

Other information

Don't quote me on whether this started with 2.25 or 2.26, it was right at the turn of the new year. It definitely never occurred on 2.24

nkasco avatar May 12 '25 17:05 nkasco