Questions tagged [azure-active-directory]
Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.
487
questions
-1
votes
1answer
16 views
With Microsoft 365 SSO. Delete user in third-party App when such user gets deleted in Active Directory
I have an application connected to Microsoft Active Directory using SSO. So basically users in the third-party App authenticate with Microsoft 365 using SSO however we would like to delete a user in ...
0
votes
0answers
5 views
On Premise NPS server check computer account in Azure AD
I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
2
votes
1answer
54 views
AADSTS50107: Requested federation realm object does not exist, when integrating Okta as an IdP for AAD
I'm trying to set up AAD with Okta, and find that when users visit the App Embed link and it posts their SAML response to https://login.microsoftonline.com/login.srf, they get an unhelpful error:
...
0
votes
1answer
22 views
Log into local Windows 2019 Remote Desktop Server with Azure AD account?
Is there a way to use Azure AD accounts to log into a Windows 2019 Remote Desktop Server? (not hosted in an Azure cloud VM)
The idea is to have the user's primary account be the Azure AD account. This ...
0
votes
1answer
22 views
when setting up active directory do I need to use a domain such as egglighting.com or can i just do something like EGG.DNS
Im setting up a new AD configuration in my work due to them previously not having one.
I can get the intiial install of ad and promote it to a domain controller just fine I am jsut wondering how the ...
0
votes
1answer
24 views
Windows Hello for Business - Hybrid Azure Joined Devices - Off LAN enrolment behaviour
Environment
Windows 10 Professional devices, Hybrid Azure AD Joined (physical)
Server 2019 DCs
AD Connect 1.5.45
Key Trust setup
Endpoint Manager used to deploy WHfB
CRL distribution point published ...
0
votes
1answer
20 views
authenticate ASP.Net App on Azure WS2019 against Azure SQL via AAD - Access token could not be acquired No mapping between account names and securi
I try to reconfigure our ASP.Net app with .Net Framework 4.7.2 from SQL username/password Auth. to token based Azure Active Directory Authentication by using the system assigned managed identity of ...
-1
votes
1answer
32 views
Pull on - premise active directory data using Azure data factory
I am fairly new to the Azure development world. I have been tasked to integrate an on-premise active directory with the cloud Azure SQL database( Managed Instance).
The task is to pull the identity ...
-1
votes
1answer
31 views
Azure AD SCIM: User not syncing with Apple School Manager
I'm currently setting up Office 365 users in Apple School Manager (ASM). For this, I've enrolled all but 2 users to ASM through Azure AD. This is the issue:
User first.lastname@domain.onmicrosoft.com ...
0
votes
0answers
22 views
Subversion Server with Azure AD SSO
There is a running CollabNet Subversion Edge Server in the current version 5.2.4.
It is currently connected with LDAP for authentication.
Now there is a challenge to grant permission to b2b guests of ...
-2
votes
1answer
51 views
AAD Domain Services VM into AAD
I have a cloud only environment. Virtual machines are connected via AAD Domain Services. How can I register these VMs in Azure AD. I would like to mount them in Intune.
thank you Stefan
1
vote
1answer
50 views
Adding a new tenant VS adding Subscription
we have a tenant in our Azure company name XYZ with some App services and B2C users, now the company has acquired another company as a subsidiary.
we want to enable Azure and Host some apps, Looking ...
0
votes
1answer
27 views
What is the best way to setup/install a new Windows PC and including it in the Active Directory? [closed]
Since I have to setup every new PC by hand I was wondering how I could optimize that.
Especially because I use the new Users password to login so the Device is added to the AD after Windows ...
-1
votes
1answer
27 views
How can I set-up a domain in Azure and use Exchange Server services there?
I'm currently raising a startup company that's using an ISP's services. All we have at this time is IMAP for e-mail. And we're using JIRA/Confluence.
I want to migrate us to a comprehensive ...
-1
votes
1answer
34 views
Force MFA when not hitting conditional access policy
We are using 365 and setting up multifactor authentication.
My thoughts are that users using hybrid Azure AD joined devices already have an additional form of authentication which is the device. And ...
0
votes
0answers
26 views
Allow fingerprint login instead of PIN via Azure AD/Endpoint Manager
I'm trying to allow users to log into Windows 10 Enterprise using their laptop fingerprint readers. On the devices the fingerprint has been set up. On the login screen, Windows is still demanding ...
0
votes
0answers
16 views
VM acting as a proxy over Azure Files for SMB2 support
Context
We're in the process of migrating a number of systems from on-prem to Azure.
As part of this, wherever we've got a file share I'm looking to switch to Azure Files, so we can avoid the joys of ...
0
votes
0answers
34 views
Can't join Azure DC VM
I have my on-premise computer which is connected to an Azure Virtual Network with a VPN Gateway.
I can ping with the private IP an Azure VM which is a Domain Controller, and even access to its file ...
1
vote
0answers
21 views
Refresh an Azure AD user's group and administrative role memberships using Graph API
Is it possible to refresh a user's Azure AD group and administrative role memberships through the Graph API to avoid the delay before these changes take effect? Azure PIM does this when a user ...
0
votes
0answers
13 views
How to configure Azure B2B Direct Federation with another partner running Azure Active Directory
My organization with like to setup Azure B2B, Direct Federation with a client of ours who is also running Azure Active Directory / Office 365.
I am having a hard time finding how to actually configure ...
0
votes
0answers
24 views
Azure AD & AD B2C local accounts and pricing
I'm trying to figure out the way Azure AD B2C stores local accounts, and the billing structure for these accounts.
From what I gather, the basic billing model for Azure AD B2C is per MAU - Monthly ...
0
votes
0answers
9 views
What are the specific steps involved in sharing a Azure Shared Image Gallery between Directories using the portal
I've seen this question and the links are correct but what the documentation fails to show is the specific steps involved to achieve sharing a Shared Image Gallery between Directories and ...
0
votes
0answers
25 views
Tenant-Tenant Migration for Planner, Forms, Flow, and Power Automate
In the middle of planning a migration for Mailboxes, OneDrive, and Teams with MigrationWiz, there are no SharePoint sites that need to be migrated except for the Teams Sites. Which should be migrated ...
0
votes
0answers
7 views
Enterprise App and SSO
Created an enterprise app in Azure for vendor. Needs explicit attributes/claims in order to allow SSO. Under SSO configuration in Users Attributes & Claims we have defined an attribute required ...
0
votes
0answers
17 views
Unknown extra mandatory attributes required while adding entry to Windows AD with LDAP client
I'm trying to add a simple key-value pair to AD via LDAP protocol.
I created a new schema named customStringStorage, with only one mandatory attribute title. This should be simple enough for learning.
...
0
votes
0answers
10 views
Azure AD Connect, different email to AD Username
I have Azure AD connect setup to sync the pupils from AD to Azure, its working great. Pupils did not exist in Azure before hand so the first sync was all new accounts.
I'm looking at linking staff ...
0
votes
0answers
8 views
IDP integration with Google Suite (RBAC)
I am trying to integrate Google apps with ADFS/Azure AD. It will be great to learn if we can use custom claims (group based / role based) to provide privileged access. I am created a few custom roles ...
0
votes
0answers
27 views
What are minimum Azure Cloud resources required for Virtual Desktops in Virtual Network and with Azure AD?
I need Virtual Desktops that can be used by accounts from the same Azure Active Directory as Azure Subscription accounts through VPN.
Subscription with as example blabla.onmicrosoft.com and linked ...
0
votes
1answer
28 views
Occasionally connected hybrid Active Directory
I'm to assist someone to upgrade the hardware on a yacht. They currently have Active Directory, running on a Server 2008 machine installed on the boat.
They also have an Office365 subscription, with a ...
0
votes
1answer
143 views
Azure Active Directory, Multiple Organizations and Tenants
When working with Azure Active Directory, does the product have a way to support multiple directories under a single tenant?
I am trying to use this example on a company that is a parent company of 3 ...
0
votes
0answers
24 views
Assign same role to multiple resources in Azure AD
I'm trying out assigning Azure AD roles (not Azure RM roles) to a custom scope (.e.g. an application registration)
First time I assign the role Application administrator to an user for a specific ...
1
vote
1answer
20 views
Need to apply a role to users that allows for installation/updating of apps on Azure connected PC
We are a small company using Azure AD. The vast majority of our employees are remote and we need them to be able to install/update apps on their PC's without requiring an Admin login every single time,...
2
votes
1answer
48 views
Hybrid Exchange - 3 step deprovisioning necessary when using archive
The Microsoft documentation for the Disable-RemoteMailbox powershell cmdlet states:
Note: If you are deprovisioning a cloud mailbox and its associated
online archive, you must first disable the ...
0
votes
1answer
106 views
List all expired service principal credentials in Azure active directory
I recently had an issue that turned out to be caused by an expired service principal credential. I would like to have a simple way to get a list of all the expiration dates/expired sp credentials to ...
0
votes
1answer
25 views
Change a synced AD user's Username
We have a user called John Smith, his username is a local AD user called John.Smith@alpha.com - this is synced with AD connect to microsoft 365.
We have a cloud shared email address called John.Smith@...
1
vote
0answers
19 views
Azure AD service app registration automatically allowed for clients without approval
I have an Azure Web App Service that will be used in a service-to-service environment. I want that this service to use the Azure AD app registration for authentication. This service will due to it's ...
-1
votes
1answer
18 views
Windows 10: sticking several domain accounts to the login screen
I would like to stick permanently 3 domain users to the login screen in Windows 10. So that they choose their account and enter the PIN, but without entering the login and password. Is it possible?
...
0
votes
0answers
17 views
I can't enable on-premises Azure Active Directory Password Protection
I can't enable on-premises Azure Active Directory Password Protection in my tenant. I sign in to the Azure portal and browse to Azure Active Directory > Security > Authentication methods > ...
0
votes
0answers
7 views
Azure AD B2B Guest users managing their own invites
I'm trying to come up with a solution where B2B guest users can manage their own invited guest users.
I have managed that B2B Guest users can invite other guest users, but I'd also like them to be ...
0
votes
1answer
18 views
Azure VM MRD Login from Mac OSX fails for Azure Active Directory accounts
I have a VM in Azure with Windows (Windows Server 2019 Datacenter) on it.
We are all using Mac OSX laptops with Microsoft Remote Desktop on it.
I need this system because Power Bi Desktop doesn't ...
0
votes
0answers
24 views
Two azure tenants in one o365 tenant mail domain
Is it possible to use the same o365 tenant with one mail domain in two azure tenants?
For example:
contoso.com has o365 and azure tenant for @contoso.com
mylab.com has o365 and azure tenant for @...
1
vote
1answer
71 views
Best Practices for Azure AD-joined PCs and Global Admin accounts
I come from an on-premise Active Directory background, but at my new position our company is entirely Microsoft 365 / Azure AD. We have no on-prem anything.
Our people are scattered across the ...
1
vote
1answer
73 views
Can I preserve a Win 10 user profile when connecting to a new Azure AD?
I have users that log in to Windows 10 desktops using Azure Active Directory, because their desktops have joined the organization.
I am about to move the custom domain name from the current Azure ...
0
votes
0answers
12 views
Can't delete an invited user from Azure Active Directory
I'm trying Azure Active Directory for the first time, I invited a user with his email but after that I accepted the invitation since I own the email I could not delete the user from: Users | All users ...
0
votes
0answers
17 views
Is it possible to trigger API or function calls when a user is created in Azure AD?
We have a handful of Azure AD domains that we are soon to be using as IdPs with a centralizing identity broker. For business and legal reasons we will not be combining these domains, establishing ...
-1
votes
1answer
112 views
Hosting Azure Active Directory and retiring on-prem AD
Background:- We have Office 365 licenses and all employees have their individual mailboxes. Currently there is one Domain Controller, which not only hosts Active directory but also acts as DNS and ...
0
votes
1answer
146 views
How to get a list of groups and group memberships in Azure?
How can I get a list of all the groups and undergroups that a user is member of?
Or how can I search for a specific undergroup? Nayone who knows of a command for this?
0
votes
1answer
57 views
Power-BI API reporting 403 unauthorized (while trying to fetch the groups) with the service principle
Power-BI API is reporting 403 unauthorized (while trying to fetch the groups) with the service principle.
0
votes
1answer
141 views
The MPN ID you provided (XXXXXX) does not exist, or you do not have access to it. Please provide a valid MPN ID and try again]
I am getting this error when I am trying to add MPNID to an Azure Application Registration. No documentation regarding this issue
The MPN ID you provided (XXXXXX) does not exist, or you do not have ...
1
vote
1answer
330 views
You must use multi-factor authentication to proceed. Please ensure MFA is enforced for your account, and then sign in again using MFA
In Azure , new requirement since Nov 9, 2020 is that all new Application Registrations must have MPNID Configured.
I keep getting this error. No documentation on what to fix.
You must use multi-factor ...
