diff --git a/docs/authentication.md b/docs/authentication.md index fe273823f7..d7fae8a3c2 100644 --- a/docs/authentication.md +++ b/docs/authentication.md @@ -129,4 +129,9 @@ Set-MgGraphOption -EnableLoginByWAM $true ```PowerShell Set-MgGraphOption -EnableLoginByWAM $false ``` -#### Note: Signin by Web Account Manager (WAM) is enabled by default on Windows and cannot be disabled. Setting this option to $False will have no effect on Windows systems. + +**Note: Signin by Web Account Manager (WAM) is enabled by default on Windows and cannot be disabled. Setting this option to $False will have no effect on Windows systems. Except if you use your own app (see below)** + +Starting with v2.35.1, to disable WAM on Windows, use `Set-MgGraphOption -DisableLoginByWAM $true` and then connect with a custom `-ClientId`. +To create your custom app, follow the guide to [Use delegated access with a custom application for Microsoft Graph PowerShell](https://learn.microsoft.com/en-us/powershell/microsoftgraph/authentication-commands?view=graph-powershell-1.0#use-delegated-access-with-a-custom-application-for-microsoft-graph-powershell +). You should also add the redirect URI of `ms-appx-web://Microsoft.AAD.BrokerPlugin/` to ensure that you can use WAM against that app registration as well.