Graph PowerShell plans a WAM shift for delegated sign-ins
Reviewed by Helen Jones
Microsoft’s Graph PowerShell project says it plans to change delegated sign-in for the default Microsoft Graph Command Line Tools application. When enabled, versions earlier than 2.36.1 will be unable to use delegated authentication unless they use Web Account Manager (WAM); Microsoft advises upgrading to 2.37.0 or later, with no enforcement date stated.
Some administrators still rely on a browser-based interactive sign-in to make the account choice explicit, particularly on shared or multi-account admin workstations. Treating an older SDK as a permanent escape route is unsafe if the change is enforced by the service rather than a local package update. This is not a tenant-wide Graph outage. It affects a specific delegated-authentication path using the default application, so the practical task is to find the scripts and runbooks that depend on it before a live sign-in fails.
Analysis
Inventory interactive Connect-MgGraph scripts that use the default client ID, record their SDK version, and test version 2.37 or later with WAM on a non-production multi-account admin workstation. For any script that needs a different identity pattern, document that decision rather than relying on an old module.
Source note
Pulse published by Collab365 Spaces, reviewed by Helen Jones on . Cite as "Graph PowerShell will push delegated sessions toward WAM", Collab365 Spaces.