Federating Entra ID Domain to TruU for Authentication

# Check if Microsoft.Graph module is installed, install if not
if (-not (Get-Module -ListAvailable -Name Microsoft.Graph)) {
    Write-Host "Microsoft.Graph module not found. Installing..."
    Install-Module Microsoft.Graph -Scope CurrentUser -Force
}
Else{
    Write-Host "Microsoft.Graph module is already installed."
}

# Step 1: Connect to Microsoft Graph with required scopes
$requiredScopes = @("Domain.ReadWrite.All", "Directory.ReadWrite.All")
Connect-MgGraph -Scopes $requiredScopes

# Step 2: Validate that the required scopes are granted
$tokenDetails = Get-MgContext
if (-not ($tokenDetails.Scopes -contains "Domain.ReadWrite.All" -and $tokenDetails.Scopes -contains "Directory.ReadWrite.All")) {
    Write-Error "Required scopes not granted. Please re-authenticate with the correct scopes."
    exit
}
Else {
    Write-Host "Required scopes are granted."
}
# Step 3: Federate the domain to TruU IDP copy and paste the content from TruU downlaoded script here.



# Check if domain is already federated before proceeding
$domain = Get-MgDomain -DomainId $dom
if ($domain.AuthenticationType -eq "Federated") {
    Write-Host "Domain $dom is already federated. Converting to managed before proceeding..."
    Update-MgDomain -DomainId $dom -AuthenticationType "Managed"
    # Refresh domain info after conversion
    $domain = Get-MgDomain -DomainId $dom
    if ($domain.AuthenticationType -eq "Managed") {
        Write-Host "Domain $dom successfully converted to managed. Waiting for a few moments before federating."
        Pause -Seconds 60 # Wait for a few seconds to ensure the change is applied
    } else {
        Write-Error "Failed to convert $dom to managed. Aborting federation."
        exit
    }
}

# Proceed with federation
New-MgDomainFederationConfiguration -DomainId $dom -DisplayName $brandName -PassiveSignInUri $passiveLogOnIdpUri -SigningCertificate $signingCert -IssuerUri $issuerUri -SignOutUri $logoffIdpUri -MetadataExchangeUri $metadataExchangeUri -PreferredAuthenticationProtocol $protocol -FederatedIdpMfaBehavior $mfaBehavior
Write-Host "Domain federated to TruU successfully."

# Step 4: Validate federation
$domain = Get-MgDomain -DomainId $dom
if ($domain.AuthenticationType -eq "Federated") {
     Write-Host "Federation validated for $dom."
} else {
    Write-Error "Federation not applied. Please check the configuration."
}

    Update-MgDomain -DomainId "#Domain name" -AuthenticationType "Managed"