Skip to content

Commit 39f6270

Browse files
Learn Build Service GitHub AppLearn Build Service GitHub App
authored andcommitted
Merging changes synced from https://github.com/MicrosoftDocs/entra-docs-pr (branch live)
2 parents e919f96 + 033e517 commit 39f6270

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

docs/identity/enterprise-apps/configure-app-management-policies.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -150,6 +150,9 @@ To grant an app an exception to the restriction blocking custom identifier URIs
150150
POST https://graph.microsoft.com/beta/policies/appManagementPolicies
151151
152152
{
153+
"displayName": "Identifier URI exemption policy",
154+
"description": "Policy granting an exemption to the nonDefaultUriAddition restriction",
155+
"isEnabled": true,
153156
"restrictions": {
154157
"applicationRestrictions": {
155158
"identifierUris": {
@@ -355,6 +358,9 @@ Sometimes, you aren't ready to apply a restriction to your entire tenant, but st
355358
POST https://graph.microsoft.com/beta/policies/appManagementPolicies
356359
357360
{
361+
"displayName": "Custom password policy",
362+
"description": "Policy that enforces the custom password restriction",
363+
"isEnabled": true,
358364
"restrictions": {
359365
"passwordCredentials": [
360366
{
@@ -450,8 +456,8 @@ This means the properties of all four restrictions should match. Or, all four re
450456

451457
The **Restrict max certificate lifetime** restriction expects all both of the following restrictions to be in the same state:
452458

453-
- The `asymmetricKeyLifetime` restriction in the `applicationRestrictions.passwordCredentials` collection
454-
- The `asymmetricKeyLifetime` restriction in the `servicePrincipalRestrictions.passwordCredentials` collection
459+
- The `asymmetricKeyLifetime` restriction in the `applicationRestrictions.keyCredentials` collection
460+
- The `asymmetricKeyLifetime` restriction in the `servicePrincipalRestrictions.keyCredentials` collection
455461

456462
This means the properties of both restrictions should match. Or, both restrictions shouldn't be present in the policy.
457463

0 commit comments

Comments
 (0)