Edit

Share via

Remove-EntraBetaPasswordSingleSignOnCredential

  • Reference
Module:
Microsoft.Entra.Beta

Removes the password Single-Sign-On (SSO) credentials.

Syntax

Remove-EntraBetaPasswordSingleSignOnCredential
      -ServicePrincipalId <String>
      -PasswordSSOObjectId <PasswordSSOObjectId>
      [<CommonParameters>]

Description

This cmdlet enables users to remove their Password Single-Sign-On credentials for an application that they're part of. Specify ServicePrincipalId and PasswordSSOCredential parameters to remove specific SSO credentials. Admin could remove the group credentials as well.

Examples

Example 1: Remove password single-sign-on credentials

Connect-Entra -Scopes 'Application.ReadWrite.All', 'Directory.ReadWrite.All'
$servicePrincipal = Get-EntraBetaservicePrincipal -SearchString '<service-principal-name>'
Remove-EntraBetaPasswordSingleSignOnCredential -ServicePrincipalId $servicePrincipal.Id -PasswordSSOCredential 'bbbbbbbb-1111-2222-3333-cccccccccccc'

This example removes the password SSO credentials for the given ServicePrincipalId and PasswordSSOObjectId.

  • -PasswordSSOObjectId parameter specifies the User or Group ID.
  • -ServicePrincipalId parameter specifies the object ID of a service principal.

Parameters

-PasswordSSOObjectId

User or group ID.

Type:System.PasswordSSOObjectId
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-ServicePrincipalId

The unique identifier of the object specific Microsoft Entra ID object.

Type:System.String
Aliases:ObjectId
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False