Add a dedicate appId registration for mooncake

[peombwa]

As a continuation of #425, we should consider adding a special appId registration for mooncake since globally registered apps don't replicate to China cloud. This effort will build upon the existing model used by GE - microsoftgraph/microsoft-graph-explorer-v4#955.

The current workaround is registering your own appId in mooncake and using it with Connect-MgGraph - Connect-MgGraph -ClientId $appId -Environment China.
AB#10522

[leapyear1969]

hello there, may i know if there's any updates on this issue? my org in China has encountered this problem.

the workaround seems not working, with below error:

Connect-MgGraph -ClientId $appId -Environment China -Scopes "User.Read.All","Group.ReadWrite.All" -TenantId $tenantId

AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: '$appId'.

However, i tried to use below commands, another error occured:

Connect-MgGraph -ClientId $clientId -Environment China -TenantId $tenantId -CertificateThumbprint $thumbprint

[maisarissi]

Hi @leapyear1969 .
Cloud you please call the command with -Debug and share the output?

Connect-MgGraph -Environment China -AppId $CN_App_Id -TenantId $CN_Tenant_Id -CertificateThumbprint $Cert_Thumbprint -Debug

[Icybiubiubiu]

Does this mean self-signed cert cannot be used here?

[leapyear1969]

hello @maisarissi

please check the error message:

[leapyear1969]

hello @Icybiubiubiu , i saw that you regesiterd you own app, and it works, how did you do that? i tried both Self-signed certificate and CA certificate，no luck for me.

[georgend]

@Icybiubiubiu Is the certificate installed in your machine?

Can you execute with the certificate in memory:-

Connect-MgGraph -Environment China -AppId $CN_App_Id -TenantId $CN_Tenant_Id -Certificate $CertificateObject -Debug

[Icybiubiubiu]

@georgend
Thanks for reminder.
issue was resolved by installing cert on the client.

[leapyear1969]

i still cannot connect to MSGraph via powershell SDK, even i installed the cert on my PC as trusted cert.

Connect-MgGraph -Environment China -AppId $CN_App_Id -TenantId $CN_Tenant_Id -Certificate $CertificateObject -Debug

[georgend]

@leapyear1969 have you uploaded the certificate to your mooncake (Azure Active Directory App Registration)?

[leapyear1969]

@leapyear1969 have you uploaded the certificate to your mooncake (Azure Active Directory App Registration)?

@georgend yes,i did upload it to the AAD app registartion.