Sign out all O365 session

Question

I'm trying to create a custom command to Sign out a user of all Office 365 sessions via powershell.
Unfortunately the cmdlet requires the AzureAD module which is not supported by the Adaxes "internal" powershell.

In the script repository I found the quite clever way of starting a new powershell instance which has support for the required module (https://www.adaxes.com/script-repositor ... e-s442.htm). However, I do not have a way to pass the stored Office 365 credential to the scriptblock and the Adaxes powershell module does not seem to have a way to get this credential (GetOffice365Credential).

Is there any way to either make the AzureAD module work with the powershell instance Adaxes uses or get the stored O365 credential with the Adaxes powershell module?

We're using Adaxes version 2017.2

Answer 1

Hello Mark,

Have a look at the following script from our repository: https://www.adaxes.com/script-repositor ... e-s290.htm.

Comments

Thank you! Invoke-Command did the trick since it's possible to pass arguments to it.

This is what I ended up doing:

$scriptBlock = {
    import-Module AzureAD

    $creds = $args[0]
    $userid = $args[1]

    Connect-AzureAD -Credential $creds
    Revoke-AzureAdUserAllRefreshToken -objectID $userid
}

# Bind to member
$member = $Context.BindToObject("Adaxes://[domain]/%distinguishedName%")

# Get Office 365 Properties
$office365Properties = $member.GetOffice365Properties()

try {
    $objectId = [Guid]$member.Get("adm-O365ObjectId")
    $objectId = $objectId.ToString()
}
catch {
    $Context.LogMessage("The member doesn't have an Office 365 account", "Warning")
    return
}

# Get Office 365 Tenant credentials
$office365Cred = $Context.GetOffice365Credential()

Invoke-Command -ComputerName localhost -ScriptBlock $scriptBlock -ArgumentList $office365Cred, $objectId