Merge pull request #2495 from microsoft/lusassl-03022026-1

Add endpoints for Bleu and Delos cloud

Author: dpaulson45

.build/cspell-words.txt

@@ -8,6 +8,7 @@ Authenticode
 authsspi
 autodiscover
 bincirc
+Bleu
 BSTR
 cach
 cachtokn

Hybrid/ConfigureExchangeHybridApplication/ConfigureExchangeHybridApplication.ps1

@@ -51,7 +51,7 @@
 .PARAMETER AzureEnvironment
     Use this parameter to run the script against non-Global cloud environments, for example, Microsoft 365 operated by 21Vianet.
     This parameter allows you to run granular configurations. Note that some of the tasks depend on others and can't be run alone.
-    Values that can be used with this parameter are: Global, USGovernmentL4, USGovernmentL5, ChinaCloud
+    Values that can be used with this parameter are: Global, USGovernmentL4, USGovernmentL5, ChinaCloud, BleuCloud, DelosCloud
     The default value is: Global
 .PARAMETER CustomClientId
     This parameter is reserved for internal Microsoft use. Do not use it unless explicitly advised by Microsoft.
@@ -156,7 +156,7 @@ param(
     [Parameter(Mandatory = $false, ParameterSetName = "FirstPartyKeyCredentialsCleanup")]
     [switch]$ResetFirstPartyServicePrincipalKeyCredentials,
 
-    [ValidateSet("Global", "USGovernmentL4", "USGovernmentL5", "ChinaCloud")]
+    [ValidateSet("Global", "USGovernmentL4", "USGovernmentL5", "ChinaCloud", "BleuCloud", "DelosCloud")]
     [Parameter(Mandatory = $false, ParameterSetName = "FullyConfigureExchangeHybridApplication")]
     [Parameter(Mandatory = $false, ParameterSetName = "FirstPartyKeyCredentialsCleanup")]
     [Parameter(Mandatory = $false, ParameterSetName = "Create")]

Security/src/CVE-2023-23397/CVE-2023-23397.ps1

@@ -122,7 +122,7 @@ param(
     [Parameter(Mandatory = $false, ParameterSetName = "Audit")]
     [int]$MaxCSVLength = 200000,
 
-    [ValidateSet("Global", "USGovernmentL4", "USGovernmentL5", "ChinaCloud")]
+    [ValidateSet("Global", "USGovernmentL4", "USGovernmentL5", "ChinaCloud", "BleuCloud", "DelosCloud")]
     [Parameter(Mandatory = $false, ParameterSetName = "CreateAzureApplication")]
     [Parameter(Mandatory = $false, ParameterSetName = "DeleteAzureApplication")]
     [Parameter(Mandatory = $false, ParameterSetName = "Audit")]

Shared/AzureFunctions/Get-CloudServiceEndpoint.ps1

@@ -54,6 +54,22 @@ function Get-CloudServiceEndpoint {
                 $azureADEndpoint = "https://login.partner.microsoftonline.cn"
                 break
             }
+            "BleuCloud" {
+                $environmentName = "BleuCloud"
+                $graphApiEndpoint = "https://graph.svc.sovcloud.fr"
+                $exchangeOnlineEndpoint = "https://outlook.sovcloud.fr"
+                $autodiscoverSecureName = "https://autodiscover-s.outlook.sovcloud.fr"
+                $azureADEndpoint = "https://login.sovcloud-identity.fr"
+                break
+            }
+            "DelosCloud" {
+                $environmentName = "DelosCloud"
+                $graphApiEndpoint = "https://graph.svc.sovcloud.de"
+                $exchangeOnlineEndpoint = "https://outlook.sovcloud.de"
+                $autodiscoverSecureName = "https://autodiscover-s.outlook.sovcloud.de"
+                $azureADEndpoint = "https://login.sovcloud-identity.de"
+                break
+            }
         }
     }
     end {

docs/Hybrid/ConfigureExchangeHybridApplication.md

@@ -80,7 +80,7 @@ RemoteRoutingDomain | Use this parameter to provide the remote routing domain of
 ConfigureTargetSharingEpr | Use this switch parameter to configure the Organization Relationships between Exchange Server and Exchange Online tenants.
 EnableExchangeHybridApplicationOverride | Use this switch parameter to create the Setting Override which enables the dedicated Exchange hybrid application. This parameter allows you to run granular configurations. Note that some of the tasks depend on others and can't be run alone.
 ResetFirstPartyServicePrincipalKeyCredentials | Use this switch parameter to remove a specific or all available Key Credentials from the Service Principal of the `Office 365 Exchange Online` application. By default, all existing Key Credentials will be removed. If you provide the thumbprint of a certificate by using the `CertificateInformation` parameter, only the specified and all expired certificates will be removed.
-AzureEnvironment | Use this parameter to run the script against non-Global cloud environments, for example, `Microsoft 365 operated by 21Vianet`. This parameter allows you to run granular configurations. Note that some of the tasks depend on others and can't be run alone. Values that can be used with this parameter are: `Global`, `USGovernmentL4`, `USGovernmentL5`, `ChinaCloud`. The default value is: `Global`
+AzureEnvironment | Use this parameter to run the script against non-Global cloud environments, for example, `Microsoft 365 operated by 21Vianet`. This parameter allows you to run granular configurations. Note that some of the tasks depend on others and can't be run alone. Values that can be used with this parameter are: `Global`, `USGovernmentL4`, `USGovernmentL5`, `ChinaCloud`, `BleuCloud`, `DelosCloud`. The default value is: `Global`
 CustomClientId | This parameter is reserved for internal Microsoft use. Do not use it unless explicitly advised by Microsoft.
 CustomGraphApiUri | This parameter is reserved for internal Microsoft use. Do not use it unless explicitly advised by Microsoft.
 CustomEntraAuthUri | This parameter is reserved for internal Microsoft use. Do not use it unless explicitly advised by Microsoft.

docs/Security/CVE-2023-23397/index.md

@@ -111,6 +111,8 @@ You can use the `AzureEnvironment` parameter to specify the cloud against which
 |USGovernmentL4  |AzureUSGovernment|GCC                            |
 |USGovernmentL5  |AzureUSGovernment|DOD                            |
 |ChinaCloud      |AzureChinaCloud  |Office365 operated by 21Vianet |
+|BleuCloud       |BleuCloud        |Bleu                           |
+|DelosCloud      |DelosCloud       |Delos                          |
 
 ### Running Against Exchange Server (On-Premises) Mailboxes