Document Details

Mutual Authentication Overview
Home / Scan #41 / Mutual Authentication Overview
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
powershell_heavy
windows_first
missing_linux_example
Summary
The documentation demonstrates a Windows bias by providing detailed PowerShell examples and references first, with more extensive PowerShell coverage than Azure CLI. There are no Linux-specific command-line examples (such as Bash or OpenSSL), and the 'Next steps' section directs users to a PowerShell-based guide, omitting Linux/CLI-focused guides. The documentation assumes familiarity with Windows tooling and patterns, potentially disadvantaging Linux users.
Recommendations
  • Provide equal depth and detail for Azure CLI (cross-platform) commands as for PowerShell, including full configuration workflows.
  • Include Linux-native examples for certificate extraction and management (e.g., using OpenSSL commands to extract or inspect certificate chains).
  • In the 'Next steps' section, link to both PowerShell and Azure CLI/Linux-based configuration guides.
  • When referencing tools or commands, present Azure CLI (cross-platform) examples before or alongside PowerShell to avoid a Windows-first impression.
  • Explicitly mention that all configuration steps can be performed on Linux/macOS using Azure CLI, and provide any OS-specific caveats if applicable.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2025-07-12 23:44 #41 cancelled Biased Biased
2025-07-12 00:58 #8 cancelled Clean Clean
2025-07-10 05:06 #7 processing Clean Clean
2025-07-09 23:22 #6 cancelled Clean Clean

Flagged Code Snippets

# Get Application Gateway configuration
$AppGw = Get-AzApplicationGateway -Name "ApplicationGateway01" -ResourceGroupName "ResourceGroup01"

# Create new SSL Profile
$profile  = Get-AzApplicationGatewaySslProfile -Name "SslProfile01" -ApplicationGateway $AppGw

# Verify Client Cert Issuer DN and enable Client Revocation Check
Set-AzApplicationGatewayClientAuthConfiguration -SslProfile $profile -VerifyClientCertIssuerDN -VerifyClientRevocation OCSP

# Update Application Gateway
Set-AzApplicationGateway -ApplicationGateway $AppGw