Test-MtEntraAgentBlueprintRedirectUriHygiene

SYNOPSIS

Finds Agent Identity Blueprints with wildcard or plain-http redirect URIs.

SYNTAX

Test-MtEntraAgentBlueprintRedirectUriHygiene [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Checks whether any Agent Identity Blueprint's web redirect URIs contain a wildcard or use plain HTTP instead of HTTPS (excluding loopback addresses). Agent Blueprint interactive consent uses response_type=none, so no token or authorization code is returned. A wildcard can send the consent result and optional state to an unintended matching endpoint. A plain-http, non-loopback URI exposes that response to interception or tampering.

EXAMPLES

EXAMPLE 1

Test-MtEntraAgentBlueprintRedirectUriHygiene

PARAMETERS

-ProgressAction

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

System.Boolean

NOTES

RELATED LINKS

https://maester.dev/docs/commands/Test-MtEntraAgentBlueprintRedirectUriHygiene

https://learn.microsoft.com/graph/api/agentidentityblueprint-list?view=graph-rest-1.0