UnipharSecurityAuth

Author(s)

• Uniphar Security Team

Tags

Azure Automation Security Authentication SendGrid KeyVault ManagedIdentity Graph ExchangeOnline

Functions

New-RandomPassword Protect-LdapFilterValue Invoke-WithRetry Connect-AzureContext Connect-GraphContext Connect-ExchangeOnlineContext Get-KeyVaultSecretPlain Get-ServicePrincipalCredentialFromKeyVault Get-OnPremAdCredential Test-OnPremAD Send-EmailViaSendGrid ConvertTo-SendGridAttachment ConvertTo-EmailRecipientArray ConvertTo-E164PhoneNumber Get-CleanManagerName Get-UserAttributeDiff Get-OrphanedEmployeeId Get-Fido2AuthenticatorModel Confirm-CanaryConnectivity Get-CanaryIncident ConvertFrom-CanaryIncident Set-CanaryIncidentAcknowledged ConvertTo-CanaryCidr Test-IpInCidrRange Get-TrustedNamedLocationRange Test-IpAllowListed Add-IpToRestrictedNamedLocation Get-SignInUserByIp Revoke-UserAccess

Dependencies

This module has no dependencies.

Release Notes

1.1.2: Added Get-Fido2AuthenticatorModel — a single canonical FIDO2 AAGUID lookup table shared by the passkey reports (removes four duplicated copies). 1.1.1: Documentation — ConvertTo-E164PhoneNumber help now states that a space between country code and national number is required, with an example of the rejected unspaced form. 1.1.0: Security hardening. New-RandomPassword now uses a CSPRNG (RandomNumberGenerator) with a Fisher-Yates shuffle. Get-SignInUserByIp validates/normalises the IP and cannot be used for OData injection. Invoke-WithRetry classifies by HTTP status code and honours the Retry-After header with jitter. Add-IpToRestrictedNamedLocation enforces a per-location range ceiling and fails closed when isTrusted is absent. Canary helpers send the auth token via header instead of the query string. ConvertTo-E164PhoneNumber only accepts space-separated country codes. Send-EmailViaSendGrid surfaces the SendGrid error detail on failure.