Document Details

Id Token Hint
Home / Scan 2 / Id Token Hint
❌
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Bias Types:
⚠️ powershell_heavy
⚠️ windows_first
⚠️ missing_linux_example
Summary:
The documentation provides code and tooling examples exclusively for Windows environments, specifically using PowerShell for key and certificate generation. There are no equivalent instructions or examples for Linux or cross-platform environments, and Windows tools are mentioned first and exclusively.
Recommendations:
  • Provide equivalent Linux and cross-platform examples for generating symmetric keys (e.g., using OpenSSL, /dev/urandom, or Python scripts).
  • Include instructions for generating self-signed certificates on Linux/macOS (e.g., using OpenSSL) alongside the PowerShell example.
  • Explicitly mention that the provided PowerShell commands are for Windows, and offer alternatives for other operating systems.
  • Reference cross-platform tools (such as OpenSSL) before or alongside Windows-specific tools to avoid the impression of Windows being the default or only supported environment.
GitHub Create pull request

Scan History

Date Scan ID Status Bias Status
2025-09-13 00:00 #110 completed ❌ Biased
2025-08-13 00:00 #79 in_progress ❌ Biased
2025-07-13 21:17 #46 cancelled ✅ Clean
2025-07-13 21:11 #45 cancelled ✅ Clean
2025-07-13 20:48 #44 cancelled ❌ Biased
2025-07-13 20:32 #43 cancelled ❌ Biased
2025-07-09 13:09 #3 cancelled ✅ Clean
2025-07-08 04:23 #2 cancelled ❌ Biased

Flagged Code Snippets

$bytes = New-Object Byte[] 32 $rand = [System.Security.Cryptography.RandomNumberGenerator]::Create() $rand.GetBytes($bytes) $rand.Dispose() $newClientSecret = [System.Convert]::ToBase64String($bytes) $newClientSecret
New-SelfSignedCertificate ` -KeyExportPolicy Exportable ` -Subject "CN=yourappname.yourtenant.onmicrosoft.com" ` -KeyAlgorithm RSA ` -KeyLength 2048 ` -KeyUsage DigitalSignature ` -NotAfter (Get-Date).AddMonths(12) ` -CertStoreLocation "Cert:\CurrentUser\My"