AuditConsumerAccounts

1.3

new-graphConnection.ps1

function New-GraphConnection
{
    Param
    (
        [Parameter(Mandatory = $true)]
        $graphHashTable
    )

    #Declare local variables.

    $msGraphInteractive = "Interactive"
    $msGraphCertificate = "Certificate"
    $msGraphClientSecret = "ClientSecret"
    $msGraphNoWam = "NoWam"
    $msGraphDeviceCodeFlow = "DeviceCodeFlow"
    $msGraphScopesRequired = $graphHashTable.msGraphDomainPermissions + "," + $graphHashTable.msGraphUserPermissions

    out-logfile -string "Begin New-GraphConnection"

    out-logfile -string "Create connection based on graph parameter set name."
    out-logfile -string ("Authentication Type: "+$graphHashTable.msGraphAuthenticationType)
    out-logfile -string ("Scopes Calculated: " +$msGraphScopesRequired)

    switch ($graphHashTable.msGraphAuthenticationType) 
    {
        $msGraphInteractive 
        {  
            out-logfile -string "Entering graph interactive authentication."

            try 
            {
                connect-mgGraph -tenantID $graphHashTable.msGraphTenantID -scopes $msGraphScopesRequired -Environment $graphHashTable.msGraphEnvironmentName -errorAction Stop
            }
            catch 
            {
                out-logfile -string "Graph authentication failed."
                out-logfile -string $_ -isError:$TRUE
            }

            out-logfile -string "Graph authentication successful."

        }
        $msGraphCertificate 
        {  
            out-logfile -string "Entering graph certificate authentication."

            try {
                connect-mgGraph -tenantID $graphHashTable.msGraphTenantID -ClientId $graphHashTable.msGraphApplicationID -CertificateThumbprint $graphHashTable.msGraphCertificateThumbprint -Environment $graphHashTable.msGraphEnvironmentName -errorAction Stop
            }
            catch {
                out-logfile -string "Graph authentication failed."
                out-logfile -string $_ -isError:$TRUE
            }

            out-logfile -string "Graph authentication successful."

        }
        $msGraphClientSecret 
        {  
            out-logfile -string "Entering graph client secret authentication."
            
            $securedPasswordPassword = ConvertTo-SecureString -String $graphHashTable.msGraphClientSecret -AsPlainText -Force

            $clientSecretCredential = New-Object -TypeName System.Management.Automation.PSCredential -argumentList $graphHashTable.msGraphApplicationID,$securedPasswordPassword

             try {
                connect-mgGraph -tenantID $graphHashTable.msGraphTenantID -Environment $graphHashTable.msGraphEnvironmentName -ClientSecretCredential $clientSecretCredential -errorAction Stop
            }
            catch {
                out-logfile -string "Graph authentication failed."
                out-logfile -string $_ -isError:$TRUE
            }
        }
        $msGraphNoWam
        {
            out-logfile -string "Entering no WAM authentication."

            out-logfile -string "Setting graph preferences to disable wam."

            try {
                Set-MgGraphOption -DisableLoginByWAM $true -ErrorAction STOP
            }
            catch {
                out-logfile -string $_ 
                out-logfile -string "Unable to set ms graph options to disable WAM." -isError:$TRUE
            }

            out-logfile -string "Connecting to Microsoft Graph using app ID no WAM."

            try {
                connect-mgGraph -tenantID $graphHashTable.msGraphTenantID -ClientId $graphHashTable.msGraphApplicationID -Environment $graphHashTable.msGraphEnvironmentName -errorAction Stop
            }
            catch {
                out-logfile -string $_
                out-logfile -string "Graph authentication failed." -isError:$TRUE
            }
        }
        $msGraphDeviceCodeFlow
        {
            out-logfile -string "Connecting to Microsoft Graph using device code flow."

            try {
                connect-mgGraph -tenantID $graphHashTable.msGraphTenantID -ClientId $graphHashTable.msGraphApplicationID -Environment $graphHashTable.msGraphEnvironmentName -deviceCode -errorAction Stop
            }
            catch {
                out-logfile -string $_
                out-logfile -string "Graph authentication failed." -isError:$TRUE
            }
        }
        Default 
        {
            out-logfile -string "You should have never ended up here - this is an issue - contact author." -isError:$TRUE
        }
    }

    out-logfile -string "End New-GraphConnection"
}