From 3411d4b77cd999a52b8ce64ebe1ef468fecb929b Mon Sep 17 00:00:00 2001 From: jsoveral Date: Mon, 10 Aug 2026 16:32:08 +0100 Subject: [PATCH] Clarify preferredTokenSigningKeyThumbprint property Updated the description of the preferredTokenSigningKeyThumbprint property to clarify its purpose and usage. --- api-reference/beta/api/serviceprincipal-update.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api-reference/beta/api/serviceprincipal-update.md b/api-reference/beta/api/serviceprincipal-update.md index cefb8131d2d..77d1e8529b4 100644 --- a/api-reference/beta/api/serviceprincipal-update.md +++ b/api-reference/beta/api/serviceprincipal-update.md @@ -70,7 +70,7 @@ In the request body, supply the values for relevant fields that should be update |publishedPermissionScopes|[permissionScope](../resources/permissionScope.md) collection|The OAuth 2.0 permissions exposed by the associated application. For more information, see the **oauth2PermissionScopes** property definition on the [application](../resources/application.md) resource. Not nullable. | |preferredSingleSignOnMode|string|Specifies the single sign-on mode configured for this application. Microsoft Entra ID uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Microsoft Entra My Apps. The supported values are password, saml, external, and oidc.| |preferredTokenSigningKeyEndDateTime|DateTimeOffset|Specifies the expiration date of the keyCredential used for token signing, marked by **preferredTokenSigningKeyThumbprint**.| -|preferredTokenSigningKeyThumbprint|String|Reserved for internal use only. Don't write or otherwise rely on this property. May be removed in future versions. | +|preferredTokenSigningKeyThumbprint|String|Thumbprint of the keyCredentials certificate used to sign SAML tokens for this service principal; set with useCustomTokenSigningKey = true to activate or roll over the SAML SSO signing certificate.| |publisherName|String|The display name of the tenant in which the associated application is specified.| |replyUrls|String collection|The URLs that user tokens are sent to for sign in with the associated application, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to for the associated application. Not nullable. | |samlSingleSignOnSettings|[samlSingleSignOnSettings](../resources/samlsinglesignonsettings.md)|The collection for settings related to saml single sign-on.|