microsoftgraph / microsoftgraph/entra-powershell
🚀 Token binding + Web Account Manager support in Entra PowerShell
Nobody has claimed this yet.
- Dominant language
- PowerShell
- Stars
- 213
- Forks
- 46
- PR merge metrics
- No merged PRs in 30d
Description
What is Access token proof of possession?
Access Token Proof of Possession (AT PoP) adds security by requiring the client to prove it holds a specific cryptographic key linked to the access token. This prevents stolen tokens from being used without the matching private key, reducing the risk of token theft and misuse.
Current Challenge:
Feature is not currently supported in Entra PowerShell and Microsoft Graph PowerShell SDK.
Why it matters:
Access Token Proof of Possession (AT PoP) strengthens security by preventing token misuse without the matching private key. It adds extra protection to MFA scenarios and increases trust in the authentication process by making token-related attacks harder to carry out.
Roadmap tracker:
This issue serves as a roadmap tracker.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the Microsoft Graph project 69 roadmap linked in the issue and compare its scope with the Entra PowerShell and Microsoft Graph PowerShell SDK support gap described here. Done would mean defining and implementing token binding and Web Account Manager support, but the issue does not identify files, tests, or a concrete implementation path.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- powershell
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100