Skip to content

Missing -UseGraphUrl* parameters and switches in SharePoint Online Pre-Auth cmdlets #11076

New issue
New issue
Open
Open
Missing -UseGraphUrl* parameters and switches in SharePoint Online Pre-Auth cmdlets#11076
Assignees
Ashlesha-MSFT
Labels
AI-generated responsesharepoint-developer-supportsharepoint-developer-supporttype:bug-suspectedSuspected bug (not working as designed/expected). See “type:bug-confirmed” for confirmed bugs.

Description

@tranhuyentran23
Tran Huyen Tran (tranhuyentran23)
opened on Oct 29, 2026

Target SharePoint environment

SharePoint Online

What SharePoint development model, framework, SDK or API is this about?

other (enter in the "Additional environment details" area below)

Developer environment

Windows

What browser(s) / client(s) have you tested

  • 💥 Internet Explorer
  • 💥 Microsoft Edge
  • 💥 Google Chrome
  • 💥 FireFox
  • 💥 Safari
  • mobile (iOS/iPadOS)
  • mobile (Android)
  • not applicable
  • other (enter in the "Additional environment details" area below)

Additional environment details

  • Target Component: SharePoint Online Management Shell (PowerShell module)
  • Module Name: Microsoft.Online.SharePoint.PowerShell
  • Module Version: Latest Public Release (16.0.27709.12000)
  • PowerShell Version: 5.1 / 7.x
  • OS Version: Windows

Describe the bug / error

According to the Microsoft 365 Developer Blog post "Pre-authenticated (tempauth) URLs are retiring: move to Microsoft Entra ID tokens before April 1, 2027", administrators and developers are supposed to be able to test application compatibility today using a new family of -UseGraphUrl* switches.

However, these parameters are entirely missing from the compiled binary definitions in the latest public production and prerelease branches of the Microsoft.Online.SharePoint.PowerShell module. Running syntax checks reveals that the feature suite has not yet been exposed in the shell tools.

Steps to reproduce

  1. Open Windows PowerShell or PowerShell 7 as an Administrator.
  2. Run Import-Module Microsoft.Online.SharePoint.PowerShell -Force.
  3. Check the syntax definitions by running: 
    Get-Command Get-SPOTenantPreAuthSettings -Syntax
Get-Command Set-SPOTenantPreAuthSettings -Syntax

Expected behavior

Expected Behavior

The SharePoint Online Management Shell should expose the entire new parameter ecosystem for testing the April 2027 tempauth deprecation:

  1. Get-SPOTenantPreAuthSettings should accept the -UseGraphUrlSettings switch to review active tenant rules.
  2. Set-SPOTenantPreAuthSettings should accept the -UseGraphUrlIsEnabled and -UseGraphUrlAppsList parameters to configure targeted application lists.

Actual Behavior

The parameters are completely missing from the module footprint. Running syntax checks only returns the legacy parameters:

For Get-SPOTenantPreAuthSettings:

Get-SPOTenantPreAuthSettings [<CommonParameters>]

For Set-SPOTenantPreAuthSettings:

Set-SPOTenantPreAuthSettings -IsDisabled <bool> [<CommonParameters>]
Set-SPOTenantPreAuthSettings -Add -Type <TenantPreAuthSettingsListType> [-IncludedApps <string>] [-ExcludedApps <string>] [-IncludedFeatures <string>] [-ExcludedFeatures <string>] [<CommonParameters>]
Set-SPOTenantPreAuthSettings -Remove -Id <string> [<CommonParameters>]

Because these parameters are missing from both cmdlets, attempting to run them against a tenant fails with parameter binding errors. This makes it impossible for developers to opt-in or test direct token-authenticated thumbnail/preview routing ahead of the deprecation timelines.

Activity

  1. Tran Huyen Tran (tranhuyentran23)
    added
    type:bug-suspectedSuspected bug (not working as designed/expected). See “type:bug-confirmed” for confirmed bugs.
    on Oct 29, 2026

  2. m365-agent-toolkit-assistant commented on Oct 29, 2026

    @m365-agent-toolkit-assistant
    m365-agent-toolkit-assistantBot
    on Oct 29, 2026 – with m365-agent-toolkit-assistant

    👋 Hi Tran Huyen Tran (@tranhuyentran23),

    Thank you for reporting this issue. Here is an AI-generated initial response:

    Classification: Bug — the reported cmdlet syntax in Microsoft.Online.SharePoint.PowerShell 16.0.27709.12000 does not match the currently documented parameters; the cause of that mismatch is unconfirmed.

    • Microsoft Learn documents -UseGraphUrlSettings for Get-SPOTenantPreAuthSettings and -UseGraphUrlIsEnabled / -UseGraphUrlAppsList for Set-SPOTenantPreAuthSettings. The reporter’s syntax output omits all three. The type:bug-suspected label is a triage signal, not a confirmed diagnosis.
    • No fixing module version or workaround for enabling these settings in the reported version is verified. The documented setting applies to requests originating through Microsoft Graph, not direct SharePoint API requests.

    What to do now:

    1. Check which module version and command source PowerShell actually loaded; in PowerShell 7, follow the documented -UseWindowsPowerShell import requirement.
    2. If the parameters remain absent, provide both cmdlets’ syntax and the loaded module version to SharePoint support. Do not change production pre-authentication settings to compensate.

    Useful links:

    Note: AI-generated guidance may be incomplete or incorrect. Please verify suggestions before applying them.

  3. m365-agent-toolkit-assistant
    added
    AI-generated response
    on Oct 29, 2026

  4. tranhuyentran23 commented on Oct 29, 2026

    @tranhuyentran23
    Tran Huyen Tran (tranhuyentran23)
    on Oct 29, 2026
    Author

    I have tested the module inside PowerShell 7 using the -UseWindowsPowerShell compatibility switch as suggested.

    The parameters remain completely missing from the cmdlet definition. Running the syntax check yields:

    Set-SPOTenantPreAuthSettings [[-WarningAction] <Object>] [[-WarningVariable] <Object>] [[-InformationAction] <Object>] [[-IncludedFeatures] <Object>] [[-OutVariable] <Object>] [[-ErrorAction] <Object>] [[-InformationVariable] <Object>] [[-Type] <Object>] [[-PipelineVariable] <Object>] [[-ExcludedApps] <Object>] [[-IsDisabled] <Object>] [[-Id] <Object>] [[-IncludedApps] <Object>] [[-ExcludedFeatures] <Object>] [[-ErrorVariable] <Object>] [[-OutBuffer] <Object>] [-Remove] [-Add] [-AsJob] [-Debug] [-Verbose]
    Image
  5. Ashlesha-MSFT
    self-assigned this
    on Oct 29, 2026

  6. Ashlesha-MSFT commented on Oct 29, 2026

    @Ashlesha-MSFT
    Ashlesha-MSFT
    on Oct 29, 2026
    Contributor

    Tran Huyen Tran (@tranhuyentran23)
    I was able to reproduce the missing -UseGraphUrl* parameters in Microsoft.Online.SharePoint.PowerShell version 16.0.25715.12000. The parameters are documented but are not exposed by the cmdlets in this version.

    The reported version 16.0.27709.12000 is yet to be verified. Before proceeding further, we need to confirm whether this is an expected release/rollout limitation or a product issue that requires an engineering fix.

  7. Ashlesha-MSFT
    added
    sharepoint-developer-supportsharepoint-developer-support
    on Oct 29, 2026

  8. Ashlesha-MSFT commented on Oct 29, 2026

    @Ashlesha-MSFT
    Ashlesha-MSFT
    on Oct 29, 2026
    Contributor

    Hi Tran Huyen Tran (@tranhuyentran23),

    Thank you for reporting this and for validating the behavior across PowerShell versions.
    We’ve confirmed with the engineering team that the -UseGraphUrl* parameters are planned to be included in this week’s SharePoint Online release, scheduled for October 30, 2026.
    As noted in the Microsoft 365 Developer Blog, this functionality is part of Path B: Keep using Microsoft Graph URLs (Coming in future Microsoft SharePoint Online PowerShell versions).
    You can refer to the blog post for further details: https://devblogs.microsoft.com/microsoft365dev/pre-authenticated-tempauth-urls-are-retiring-move-to-microsoft-entra-id-tokens-before-april-1-2027/

    Please update to the latest SharePoint Online Management Shell version after the release and verify whether the parameters are available.

  9. tranhuyentran23 commented on Oct 30, 2026

    @tranhuyentran23
    Tran Huyen Tran (tranhuyentran23)
    on Oct 30, 2026
    Author

    Hi Ashlesha-MSFT ,
    Thanks for your support! I will wait until the new version of SharePoint Online release then I will update to the latest SharePoint Online Management Shell version and check again 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

AI-generated responsesharepoint-developer-supportsharepoint-developer-supporttype:bug-suspectedSuspected bug (not working as designed/expected). See “type:bug-confirmed” for confirmed bugs.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions