How to replace New-MsolServicePrincipal from the MSOnline module?

[VladimirKhvostov]

Hello,
Since MSOnline is planned for deprecation on March 30, 2024, I am trying to migrate out of it.

Here is a code snippet that we use to create a service principal:

    $newSp = New-MsolServicePrincipal -DisplayName $serviceName -AppPrincipalId $spguid `
            -ServicePrincipalNames @( $serviceName, $splongname ) `
            -Type asymmetric -Value $credValue -StartDate $start -EndDate $end `
            -Usage Verify

The most important piece - we can specify AppPrincipalId.

Here is my C# code (which does not work):

        string filter = new MsGraphFilterBuilder().WithSearchEqualByGuid([appId], "appId").BuildFilter();
           
        IGraphServiceApplicationsCollectionPage appResponse = client.Applications.Request()
            .Filter(filter)
            .Top(1)
            .GetAsync().SyncResult();

        Application app = appResponse.FirstOrDefault();

        if (app is null)
        {
            app = new Application()
            {
                DisplayName = Name,
                //ApplicationTemplateId = "8adf8e6e-67b2-4cf2-a259-e3dc5476c621",
                //AppId = appId,
                //Id = appId,
            };

            app = client.Applications.Request().AddAsync(app).SyncResult();
        }

        var servicePrincipal = new Microsoft.Graph.ServicePrincipal()
        {
            AppId = app.AppId,
            KeyCredentials = [
                new Microsoft.Graph.KeyCredential()
                {
                    StartDateTime = DateTime.Now,
                    EndDateTime = new DateTime(year: 2038, month: 1, day: 19),
                    Usage = "Verify",
                    Type = "AsymmetricX509Cert",
                    Key = key
                }
            ],
            DisplayName = Name
        };

        client.ServicePrincipals.Request().AddAsync(servicePrincipal).SyncResult();

When New-MsolServicePrincipal creates a service principal, I do not see an app in the Azure Portal.
If I try to create an app using ApplicationTemplateId = "8adf8e6e-67b2-4cf2-a259-e3dc5476c621" (non-gallery apps), I getting the following error:
Code: Authorization_RequestDenied
Message: Insufficient privileges to complete the operation.

I can create an app using the same credentials if I comment out ApplicationTemplateId.
Unfortunatelly, I cannot specify AppId. If I try to set AppId, I am getting the following error:

Code: Request_BadRequest
Message: Property 'appId' is read-only and cannot be set.
Inner error:
AdditionalData:
date: 2023-12-09T02:23:38
request-id: 84b404dc-9fdd-4763-a723-9612002c7264
client-request-id: 84b404dc-9fdd-4763-a723-9612002c7264
ClientRequestId: 84b404dc-9fdd-4763-a723-9612002c7264

What can I do to create Application/Service Principal with specific AppId?

Thanks in advance!
--Vladimir

[VladimirKhvostov]

Is it fair to assume that https://provisioningapi.microsoftonline.com/ProvisioningWebService.svc will NOT be deprecated on March 30, 2024?
We can use it instead of cmdlets from the MSOnline module.
It possible to generate client usin the following:
svcutil.exe https://provisioningapi.microsoftonline.com/ProvisioningWebService.svc?wsdl

I attached ProvisioningWebServiceClientFactory code if someone is interested.
Factory.zip

Thanks,
--Vladimir

[VladimirKhvostov]

Hello,
how can we get in touch with the team that owns https://provisioningapi.microsoftonline.com/ProvisioningWebService.svc ?
We want to make sure that it will not be deprecated any time soon.
Thanks!
--Vladimir