New-AADIntKerberosTicket

NAME New-AADIntKerberosTicket



SYNOPSIS

Generates a kerberos token to be used with Azure AD Desktop SSO





SYNTAX

New-AADIntKerberosTicket -Sid <Byte[]> -Password <String> [<CommonParameters>]



New-AADIntKerberosTicket -SidString <String> -Password <String> [<CommonParameters>]



New-AADIntKerberosTicket -ADUserPrincipalName <String> -Password <String> [<CommonParameters>]



New-AADIntKerberosTicket -AADUserPrincipalName <String> -AccessToken <String> -Password <String>

[<CommonParameters>]





DESCRIPTION

Generates a kerberos token to be used with Azure AD Desktop SSO, also known as Seamless SSO.

Azure AD does only care about user's sid, so no other information needs to be given.





PARAMETERS

-Sid <Byte[]>

User's sid as a byte array



Required? true

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



-SidString <String>



Required? true

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



-ADUserPrincipalName <String>

User's principal name. Used to find user from Active Directory to get the SID



Required? true

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



-AADUserPrincipalName <String>

User's principal name. Used to find user from Azure Active Directory to get the SID



Required? true

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



-AccessToken <String>

Access Token of the user accessing Azure Active Directory to find the given user to get the SID



Required? true

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



-Password <String>

Password of the AZUREADSSOACC computer account



Required? true

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS



OUTPUTS



-------------------------- EXAMPLE 1 --------------------------



PS C:\\>Get-AADIntKerberosTicket -Password "MyPassword" -Sid $sid



YIIHIAYGKwYBBQUCoIIHFDCCBxC..(truncated)..qJ9OYopBjdCAzi8gY8dIFy8+g==









-------------------------- EXAMPLE 2 --------------------------



PS C:\\>Get-AADIntKerberosTicket -Password "MyPassword" -SidString "S-1-5-21-854568531-3289094026-2628502219-1111"



YIIHIAYGKwYBBQUCoIIHFDCCBxC..(truncated)..qJ9OYopBjdCAzi8gY8dIFy8+g==









-------------------------- EXAMPLE 3 --------------------------



PS C:\\>Get-AADIntKerberosTicket -Password "MyPassword" -ADUserPricipalName "user@company.com"



WARNING: SID not given, trying to find user from the Active Directory



YIIHIAYGKwYBBQUCoIIHFDCCBxC..(truncated)..qJ9OYopBjdCAzi8gY8dIFy8+g==



PS C:\\>Get-AADIntKerberosTicket -Password "MyPassword" -ADUserPricipalName "user@company.com"

WARNING: SID not given, trying to find user from the Azure Active Directory.

WARNING: This may take some time, so it would be better to save the AAD objects to

WARNING: a variable using Get-AADIntSyncObjects and parse SID manually.



YIIHIAYGKwYBBQUCoIIHFDCCBxC..(truncated)..qJ9OYopBjdCAzi8gY8dIFy8+g==











RELATED LINKS





CommonParameters : True

WorkflowCommonParameters : False

details : @{name=New-AADIntOneDriveSettings; noun=; verb=}

Syntax : @{syntaxItem=System.Object[]}

parameters : @{parameter=System.Object[]}

inputTypes : @{inputType=}

returnValues : @{returnValue=}

aliases : None



remarks : None

alertSet :

description :

examples :

Synopsis :

New-AADIntOneDriveSettings [-Credentials <pscredential>] [<CommonParameters>]



New-AADIntOneDriveSettings -SAMLToken <string> [<CommonParameters>]



New-AADIntOneDriveSettings -KerberosTicket <string> -Domain <string> [<CommonParameters>]



ModuleName : AADInternals

nonTerminatingErrors :

xmlns:command : http://schemas.microsoft.com/maml/dev/command/2004/10

xmlns:dev : http://schemas.microsoft.com/maml/dev/2004/10

xmlns:maml : http://schemas.microsoft.com/maml/2004/10

Name : New-AADIntOneDriveSettings

Category : Function

Component :

Role :

Functionality :