How to add an application password in Entra ID using Microsoft Graph PowerShell

The Add-MgApplicationPassword cmdlet creates and assigns a new password credential to a specific application registered in Microsoft Entra ID (previously Azure AD). This cmdlet is essential when applications require client secrets for authentication.

Add application password using Microsoft Graph PowerShell

• Before using the cmdlet, ensure that the Microsoft Graph PowerShell module is installed. If not, install it using this PowerShell command:
  Copy Install-Module Microsoft.Graph -Scope CurrentUser
• Also, use the following PowerShell command to connect to Microsoft Graph with the required permissions (e.g., Application.ReadWrite.All):
  Copy Connect-MgGraph -Scopes "Application.ReadWrite.All"

Using the Add-MgApplicationPassword cmdlet

Run the following Graph PowerShell command below to add a password (client secret) to an application. Replace <application-id> with the object ID or GUID of the application, and <object> with the properties for the new password credential:

Examples

Example 1: Add a new password credential to an application

This Graph PowerShell command adds a password credential with the display name "MyAppSecret" to the specified application:

Example 2: Set a custom password value

This Graph PowerShell command creates a new password credential with a specified value:

Supported parameters

The following are some essential parameters that can be used along with the Add-MgApplicationPassword command:

Limitations of using Microsoft Graph PowerShell to add application password

• PowerShell commands can be difficult to manage with complex scenarios.
• IT admins can spend a lot of time debugging errors, which in turn negatively impacts productivity.
• Delegation can get tricky since technicians require elevated permissions.