Skip to content

Set-SsoAuthenticationPolicy: Certificate Revocation "Disabled" Option? #602

Open
@ttierno2

Description

@ttierno2

Is your feature request related to a problem? Please describe.

The functions in the AuthenticationPolicy.ps1 do work for me, however when I run the command as such:

Get-SsoAuthenticationPolicy | Set-SsoAuthenticationPolicy -SmartCardAuthnEnabled $true -OCSPEnabled $false -UseInCertCRL $false -SendOCSPNonce $false -UseCRLAsFailOver $false -TrustedCAs $Cert_String**

I end up with an 'Unknown' entry under Certificate Revocation (picture attached)
Rev_Unknown

You can see when I dig further that no option is selected here after running that command (picture attached)
No_Rev_Op

I don't see a way to set 'Certificate revocation' to disabled.

**(I populate the $Cert_String variable properly)

Describe the solution you'd like

A 'Disabled' parameter here, instead of specifying OCSP and/or CRL options, that would set the 'Certificate revocation' to disabled would be extremely helpful.

Describe alternatives you've considered

No response

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions