How to generate a report via powershell,list of all Enterprise applications using a single sign on authentication

JYLVEN TARRAJA 80 Reputation points
2025-01-31T00:15:56.0166667+00:00

Hi,

Good day

Please asking on your expertise in generating a list of enterprise applications in Microsoft Entra to identify who are using the Single Sign On authentication.

Thank you in advance.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,680 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,621 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,796 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,149 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Sandeep G-MSFT 20,701 Reputation points Microsoft Employee
    2025-01-31T06:09:27.5866667+00:00

    @JYLVEN TARRAJA

    Thank you for posting this in Microsoft Q&A.

    As I understand you are looking to pull list of enterprise applications in Microsoft Entra which are SSO enabled.

    To get a list of Single Sign-On (SSO) enabled applications in an Azure AD tenant, you can use PowerShell. Specifically, the Azure AD PowerShell module can be utilized for this purpose. Here's a general approach:

    1. Install the Azure AD PowerShell Module (if not already installed):PowerShellCopy
       Install-Module -Name AzureAD
    
    1. Connect to Your Azure AD Tenant:PowerShellCopy
       Connect-AzureAD
    
    1. Retrieve SSO Enabled Applications: You can use a command like Get-AzureADServicePrincipal to list applications, and then filter or inspect these to determine which have SSO enabled.PowerShellCopy
       Get-AzureADServicePrincipal -All $true | Where-Object { $_.Tags -like "*WindowsAzureActiveDirectoryIntegratedApp*" }
    

    This command lists all service principals (applications) and filters for those with a specific tag that typically denotes SSO integration.

    Remember, the specific command and its filters might vary based on how SSO is set up in your environment.

    Let us know if you have any further questions on this.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.