Intune-Set-PrimaryUsers.ps1 - Using with ClientID & ClientSecret => Cannot convert the "XXX" value of type "System.String" to type "System.Security.SecureString"

[eggertom]

Hi guys - i am totally confused as i am not getting this script running with app-only authentication....

what i am doing wrong?
i specifiy the

$AuthTenantId in cleartext
$AuthClientId in cleartext

and also played around with getting this $AuthClientSecret somehow specified in the script

$AuthClientSecret in cleartext => does not work as it expects a type "System.Security.SecureString"

then i tried to convert the clear text secret into a secure.string

[System.Security.SecureString]$AuthClientSecret = (ConvertTo-SecureString "XXX" -AsPlainText -Force)
=> this try also runs into an error or let me say correctly it seems that he is then switching back to the Interactive prompt...

my last try was to get it running with
$ClientSecretCredential = New-Object System.Management.Automation.PSCredential ($ClientId, $ClientSecretSecure)

but i also failed...

thx for your help guys.
br tom

[Mr-Tbone]

I will take a look. I run it as a managed identity in azure automation. So I haven't tested the app and secret for a long time.

[Mr-Tbone]

Please try it now, I have adjusted the function to detect and use a secure string.

[eggertom]

Hi, thx, i will try it hopefully tomorrow in the office. Yeah i tried it too witj an automation account but it seems we are too big 😀 the scripts needs around 700MB and that exceeds the sandbox memory... i tried ti reduce the scope etc but it still needed to much. Hybrid workers are generating costs etc so i am working now to get it running on a onprem device which runs anyway 24/7...

I will let you know the outcome. Br & thx

[Wh1t3Rose]

I am also notciing this issue. "Cannot convert the "XXX" value of type "System.String" to type "System.Security.SecureString""

Also using Client ID and Secret,

Happy to do any testing this week and I can be responsive

[eggertom]

Hello, sorry for the little late response - nope it is still not working

i tried it with specifying the secret in plain text and also via

$(Get-Content C:\temp\Scheduled_Scripts\Daily\Set-Intune-Primary-User-Account\pwd.txt | ConvertTo-SecureString)

and other similar variants... still the same..

br tom

[Mr-Tbone]

ok, there was a miss match if using secure string or not.
Now the $AuthClientSecret is an "object" that later is converted from both secure and non secure string to a secure string and used for credentials. Hope it works now. It is a bit complex to test and verify what changes I made in my test script. so that the credentials is not synced to github :-)