v1.2.0 - Advanced Duplicate Role Handling & Enterprise Performance

Release Notes

🎉 PIMActivation v1.2.0

Major performance improvements and enhanced handling of duplicate role assignments.

✨ What's New

🚀 85% Faster Role Loading

• New batch API system reduces load time from 15-30 seconds to 3-5 seconds
• Fewer API calls mean better reliability and less throttling

🎯 Smart Duplicate Role Handling

• Correctly shows when roles come from groups vs direct assignments
• Properly displays which group provides each role (e.g., "Entra ID (via Group: GroupName)")
• Fixed issues where duplicate roles showed incorrect source information

🛡️ Improved Reliability

• Better error handling prevents crashes from missing data
• Fixed progress bar jumping backwards
• Resolved cache refresh timing issues

🐛 Bug Fixes

• Fixed duplicate roles showing incorrect group attribution
• Fixed roles from different groups showing the same source
• Fixed direct assignments being misidentified as group-derived
• Fixed "Directory" showing instead of "Entra ID Directory"
• Fixed various property access errors

📦 Installation

# Update existing installation
Update-Module -Name PIMActivation

# Fresh installation
Install-Module -Name PIMActivation -Scope CurrentUser

---

Full Changelog: v1.1.1...v1.2.0

v1.1.1 - Just-in-Time Module Loading & Version Pinning

🚀 What's New in v1.1.1

⚡ Major Improvements

• Just-in-Time Module Loading: Modules are now loaded only when needed with exact version pinning
• Assembly Conflict Prevention: Automatically removes conflicting module versions from the session
• Latest Module Compatibility: Updated to use Microsoft.Graph 2.29.1 + Az.Accounts 5.1.0 (tested working combination)
• Improved Reliability: Eliminates module version conflicts that could cause authentication failures

🔧 Technical Changes

• Replaced legacy Install-RequiredModules with new Initialize-PIMModules system
• Added Import-PIMModule function for on-demand module loading
• Implemented module loading state tracking
• Removed Scripts folder and compatibility testing tools (no longer needed)
• Updated troubleshooting documentation with latest version guidance

📦 Module Requirements

• Microsoft.Graph.Authentication 2.29.1
• Microsoft.Graph.Users 2.29.1
• Microsoft.Graph.Identity.DirectoryManagement 2.29.1
• Microsoft.Graph.Identity.Governance 2.29.1
• Az.Accounts 5.1.0

🐛 Bug Fixes

• Fixed module compatibility issues that could cause AuthenticateAsync method signature errors
• Improved module initialization reliability
• Enhanced error handling during module loading

📚 Documentation Updates

• Updated troubleshooting guide with latest version compatibility information
• Revised module installation instructions
• Added guidance for resolving version conflicts

This release significantly improves the module loading experience and ensures consistent, reliable operation across different environments.

v1.1.0 - WAM Authentication & Enhanced Reliability

🚀 PIMActivation v1.1.0 - Major Authentication Improvements

This release introduces Windows Web Account Manager (WAM) authentication for significantly improved reliability and removes the dependency on MSAL.PS module.

✨ What's New

🔐 WAM Authentication

• Windows Web Account Manager Integration: More reliable authentication experience on Windows 10/11
• Direct MSAL.NET Calls: Better performance through Az.Accounts MSAL assemblies
• Enhanced Token Management: Improved timeout handling and error recovery

🧹 Dependency Cleanup

• Removed MSAL.PS Dependency: Eliminates authentication hanging issues
• PowerShell 7+ Native: Fully optimized for modern PowerShell with no legacy fallbacks
• Streamlined Assembly Loading: Better management from Az.Accounts module

🔧 Technical Improvements

• Enhanced authentication context handling with direct MSAL.NET calls
• Better assembly loading and management from Az.Accounts module
• Enhanced error messages and troubleshooting information
• Resolved authentication hanging issues with proper async/sync handling
• Improved reliability of authentication prompts on Windows 10/11
• Fixed role refresh timing issues after activation with retry logic

🙏 Credits

WAM implementation inspired by Trevor Jones' excellent blog post on WAM authentication in PowerShell.

📋 Requirements

• Windows 10/11 or Windows Server 2016+
• PowerShell 7+ (required for WAM support)
• Az.Accounts 3.0+ (replaces MSAL.PS dependency)
• Microsoft Graph PowerShell modules (auto-installed)

🔄 Breaking Changes

• MSAL.PS module no longer required - now uses Az.Accounts for authentication
• PowerShell 5.1 support removed - PowerShell 7+ is now mandatory

📦 Installation

# Update existing installation
Update-Module -Name PIMActivation

# Fresh installation
Install-Module -Name PIMActivation -Scope CurrentUser

🐛 Bug Fixes

For users experiencing authentication issues with v1.0.x, this release should resolve:

• Authentication hanging or timeout issues
• Unreliable authentication prompts
• Token acquisition failures in authentication context scenarios

Full Changelog: v1.0.1...v1.1.0

PIM Activation v1.0.0 - Initial Release

🎉 PIMActivation v1.0.0 - Initial Release

First public release of the PIMActivation PowerShell module for Microsoft Entra ID Privileged Identity Management.

✨ Key Features

Core Functionality

• 🖥️ Modern GUI Interface - Windows Forms application for easy PIM role management
• 🔐 Multi-Role Activation - Select and activate multiple roles simultaneously
• ⏱️ Flexible Duration - Configure activation duration from 1-24 hours
• 🔄 Real-time Updates - View active and eligible roles with automatic refresh
• 👤 Account Switching - Switch between accounts without restarting

Supported Role Types

• ✅ Entra ID Directory Roles - All built-in and custom directory roles
• ✅ PIM-Enabled Security Groups - Groups configured for privileged access
• 🚧 Azure Resource Roles - Planned for v2.0.0

Policy Compliance

• 🔑 Multi-Factor Authentication (MFA) - Seamless MFA prompts when required
• 📝 Justification - Required justification text for audit compliance
• 🎫 Ticket Information - Optional ticket number and system integration
• 🛡️ Authentication Context - Full support for Conditional Access authentication contexts
• ✔️ Approval Workflows - Handles roles requiring approval

Technical Highlights

• PowerShell 7+ Optimized - Built for modern PowerShell with enhanced performance
• Authentication Context Support - Token caching and validation for context-based policies
• Intelligent Error Handling - User-friendly error messages and recovery options
• Module Auto-Installation - Required dependencies installed automatically

📋 Requirements

• PowerShell 7+ (Download)
• Windows 10/11 or Windows Server 2016+
• Microsoft Graph PowerShell Modules (auto-installed)
• MSAL.PS module for authentication context management
• Appropriate Entra ID Permissions

🚀 Installation

# Install from PowerShell Gallery
Install-Module -Name PIMActivation -Scope CurrentUser

# Import and start
Import-Module PIMActivation
Start-PIMActivation

🤖 Development Transparency

This module was developed using modern AI-assisted programming practices:

• AI Tools Used: GitHub Copilot and Claude for fast code generation, problem-solving, and debugging
• Human Expertise: Architecture design, PIM workflow implementation, security considerations, real-world testing and bug fixes
• Quality Assurance: All AI-generated code has been thoroughly reviewed, tested, and validated in production environments

📖 Documentation

• Full documentation
• Blog post with detailed walkthrough
• Help documentation

🙏 Acknowledgments

This module leverages the Microsoft.Graph PowerShell SDK and MSAL.PS for authentication. Special thanks to:

• The Microsoft Identity team for comprehensive PIM APIs
• The PowerShell community for feedback and best practices
• AI tools that accelerated development while maintaining code quality

📄 License

MIT License - See LICENSE file for details

---

Full Changelog: This is the initial release - CHANGELOG.md

Author: Sebastian Flæng Markdanner
Blog: Cloudy With a Chance Of Security