Enable servicePrincipalLockConfiguration in SAM

JohnDuprey · JohnDuprey · commit 5ca0443148b2 · 2026-02-18T15:41:22.000-05:00
Add a servicePrincipalLockConfiguration entry to Modules/CIPPCore/lib/data/SAMManifest.json with isEnabled: true and allProperties: true. This updates the SAM manifest to include service principal lock settings so the service principal's properties are locked according to the manifest configuration.
diff --git a/Modules/CIPPCore/lib/data/SAMManifest.json b/Modules/CIPPCore/lib/data/SAMManifest.json
@@ -10,6 +10,10 @@
       "http://localhost:8400"
     ]
   },
+  "servicePrincipalLockConfiguration": {
+    "isEnabled": true,
+    "allProperties": true
+  },
   "requiredResourceAccess": [
     {
       "resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2",

Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,10 @@`
`10`	`10`	`"http://localhost:8400"`
`11`	`11`	`]`
`12`	`12`	`},`
	`13`	`+ "servicePrincipalLockConfiguration": {`
	`14`	`+ "isEnabled": true,`
	`15`	`+ "allProperties": true`
	`16`	`+ },`
`13`	`17`	`"requiredResourceAccess": [`
`14`	`18`	`{`
`15`	`19`	`"resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2",`