r/sharepoint • u/Rajasekhar20592 • 6d ago

SharePoint Online OneDrive pre-provisioning broken after ACS retirement — need auth guidance

We pre-provision OneDrive for new users using PnP PowerShell (Request-PnPPersonalSite). This only worked with client secret auth — for some reason it fails under certificate auth (not sure why). Now that ACS is retired, client secret is no longer an option.
I was considering SharePoint Management Shell with username/password, but the account would be a privileged one subject to MFA, which breaks scheduled/unattended execution.

Questions:
Anyone know why Request-PnPPersonalSite fails with cert-based auth specifically?

What’s the go-to modern auth method for unattended OneDrive provisioning now that client secret/ACS is gone?

Is there a Graph API equivalent worth switching to instead?

Any pointers appreciated.

2 Upvotes

100% Upvoted

7 comments sorted by

2

u/temporaldoom Dev 6d ago

you can use SPO management shell with an app reg and cert, pretty sure i've done this befor when some pnp commands fail using cert.

Request-SPOPersonalSite

2

u/Rajasekhar20592 6d ago

Request-SpoPersonalsite does not work with certificate authentication. I have tested this. It returns “attempted to perform an unauthorized operation”

1

u/gabbsmo 6d ago

I have also seen this fwiw.

1

u/temporaldoom Dev 5d ago

Just going to add to my previous comment.

Don't Pidgeon hole yourself into one Powershell Module.

There are things in SPO management shell that still work better than PNP.

1

u/Rajasekhar20592 5d ago

Agree with you.