Azure AD SSO Certificate renewal

Question

1) Is there a way for us to set a default service email for certificate renewal notification, instead of adding manually every time in the UI?

2) Is there a script way to go through the apps in Azure AD and identify if a specific email has been added to Azure AD SSO certificate renewal notification section?

Answer 1

Hello @Pa_D ,

Thank you for reaching out.

Please find inline answer. Hope this helps.

1) Is there a way for us to set a default service email for certificate renewal notification, instead of adding manually every time in the UI?

[Ans]: You could use Graph API to set "notificationEmailAddresses" for Enterprise application SAML Signing Certificate.

Request:

PATCH https://graph.microsoft.com/beta/servicePrincipals/<ObjectID>

Body
{"notificationEmailAddresses": ["siva@atriumph.onmicrosoft.com"]}

Request Header
Content-Type: application/json

2) Is there a script way to go through the apps in Azure AD and identify if a specific email has been added to Azure AD SSO certificate renewal notification section?

[Ans]:
Unfortunately, there is no such script.

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Please find inline answer:

1) Does this email address get added as default address for all new apps that we build?
This would replace all existing one with address that is mentioned in Graph API call.

Example: If I use following {"notificationEmailAddresses": ["ryan@atriumph.onmicrosoft.com"]} in Body then it replace all existing with rayan@atriumph.onmicrosoft.com. If you want to add multiple recipient then add email address with comma-separated as shown below.

{  
    "notificationEmailAddresses": [  
        "ryan@atriumph.onmicrosoft.com",  
        "joel@atriumph.onmicrosoft.com"  
    ]  
}  

2) What is the service principal GUID in the URI?
3) Where do we find the Object ID?
From Enterprise Application blade you can find your application Object ID as show below:

Answer 3

Hi sikumars-msft
Thanks for your explaining
i have question
this is only to add for individual application ?
no way to add bulk
thanks