AzureServicePrincipalCredentials
Azure Service Principal Credentials Discovery Module for M&A Discovery Suite
What it does
Discovers secrets and certificates associated with Azure AD Application Registrations. Identifies expiration dates, credential types, and hints for lifecycle management. Migration-useful shape (v1.3.0): - ApplicationObjectId (directory object id) + AppId (client id) + TenantId - ManagerId = ApplicationObjectId so Export-DiscoveryResult fills _ParentAnchorID - IsExpiringSoon (90d) / IsExpiringCritical (30d) for rotation planning - Certificate CustomKeyIdentifier + Usage - App-level AppCredentialSummary rows (counts, earliest expiry, parent = TenantId) - Denormalized SignInAudience / PublisherDomain / AppCreatedDateTime on credential rows
How the app exposes it
The module runs through the ACQI discovery orchestrator and writes its rows into a dedicated results view. From there, conflicts, dependencies, and readiness scores feed the deal-wide consolidation layer.
/discovered/azure-service-principal-creds Outputs
Each module emits a normalised CSV keyed by entity ID with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact column set varies by module — the app's results view shows the live schema.