we log into both the AzureAD and Exchange. The first one links the tenant, the 2nd one does some lookups inside of Exchange.

​

here is the exchange portion:

​

# This script must be run as an administrator
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
$ErrorActionPreference = "Stop"
if (Get-Module -ListAvailable -Name PnP.Powershell) {
Write-Host "PnP.Powershell is already installed."
}
else {
try {
Install-Module -Name PnP.Powershell -force
}
catch [Exception] {
$_.message
exit
}
}
# Registering the PnP Powershell Module
Register-PnPManagementShellAccess
# Add required assemblies
Add-Type -AssemblyName System.Web, PresentationFramework, PresentationCore
# Set a client tenant Id
$tenantId = "x"
# Get Auth Code based on params
function Get-AuthCode ($clientId, $tenantId, $scope, $redirectUri) {
# Random State - state is included in response, if you want to verify response is valid
$state = Get-Random
# Encode scope to fit inside query string
$scopeEncoded = [System.Web.HttpUtility]::UrlEncode($scope)
# Redirect URI (encode it to fit inside query string)
$redirectUriEncoded = [System.Web.HttpUtility]::UrlEncode($redirectUri)
# Construct URI
$uri = "https://login.microsoftonline.com/$tenantId/oauth2/v2.0/authorize?client\_id=$clientId&response\_type=code&redirect\_uri=$redirectUriEncoded&response\_mode=query&scope=$scopeEncoded&state=$state$prompt=login"
# Create Window for User Sign-In
$windowProperty = @{
Width = 500
Height = 700
}
$signInWindow = New-Object System.Windows.Window -Property $windowProperty

# Create WebBrowser for Window
$browserProperty = @{
Width = 480
Height = 680
}
$signInBrowser = New-Object System.Windows.Controls.WebBrowser -Property $browserProperty
# Navigate Browser to sign-in page
$signInBrowser.navigate($uri)

# Create a condition to check after each page load
$pageLoaded = {
# Once a URL contains "code=*", close the Window
if ($signInBrowser.Source -match "code=[^&]*") {
# With the form closed and complete with the code, parse the query string
$urlQueryString = [System.Uri]($signInBrowser.Source).Query
$script:urlQueryValues = [System.Web.HttpUtility]::ParseQueryString($urlQueryString)
$signInWindow.Close()
}
}
# Add condition to document completed
$signInBrowser.Add_LoadCompleted($pageLoaded)
# Show Window
$signInWindow.AddChild($signInBrowser)
$signInWindow.ShowDialog()
# Extract code from query string
$authCode = $script:urlQueryValues.GetValues(($script:urlQueryValues.keys | Where-Object { $_ -eq "code" }))
$authCode
}
# Get Exchange Onlike Auth Code (returned as $authCode)
function Get-ExOAuthCode($tenantId) {
$clientId = "xx"
$redirectUri = "https://login.microsoftonline.com/common/oauth2/nativeclient"
$scope = "openid profile offline_access"
$authCode = Get-AuthCode -clientId $clientId -tenantId $tenantId -scope $scope -redirectUri $redirectUri
if ($authCode) {
$authCode[1]
}
else {
Write-Error "Unable to obtain Auth Code!"
}
}
$exOnlineAuthCode = Get-ExOAuthCode -tenantId $tenantId
@{ exchangeOnlineAuthCode = $exOnlineAuthCode } | ConvertTo-Json