Questions tagged [azure-active-directory]
Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.
421
questions
0
votes
1answer
85 views
On-Prem AD to Azure AD Sync with existing users in both
I have an on-prem active directory domain called xyzcorp.com. I also have an Azure AD domain called xyzcorp.com. The two are not synchronized at the moment. What I want to be able to do is enable ...
3
votes
1answer
41 views
Active Directory ADSync error with non-existent account
I have a weird ADSync error stating that my local active directory contains two objects with the same ProxyAddress property. One of accounts is username@domain.tld (which is correct) and the second is ...
0
votes
0answers
22 views
The preferred replica is unavailable - Microsoft Graph
While creating user using microsoft graph,it was working fine yesterday but now I am getting the error below. I re-activated the subscription.
"error": {
"code": "...
0
votes
0answers
14 views
How cache credentials works
I want to know how cache credentials works in active directory environment? How cache credentials are stored ? How it is hashed? What will happen when a user changes his password ?
0
votes
0answers
17 views
How to connect to Azure SQL database from SSRS using integrated authentication
Could you please share the steps or documentation links for configuring SSRS reports in an Azure virtual machine to Azure SQL database using Windows / network account?
The Azure VM is domain joined ...
0
votes
2answers
30 views
Can Azure AD users be used in a non-cloud Windows domain?
We have a bunch of bare-metal servers managed by a hosting company (UKFast).
On one of these we have a Domain Controller set up and the other servers are part of this domain (Windows 2012 R1 server).
...
0
votes
0answers
9 views
Auto expiry of user access in Azure ADLS Gen2
I have data to be stored in ADLS Gen2 which could be requested for by other users in my organisation. After approval, users will have access which should expire after a certain duration (e.g. 2 weeks)....
2
votes
0answers
29 views
Connect multiple AD domains to multiple AD Domains in single Azure tenant
I have a requirement to replicate three domains to Azure, they are all different domain names, there is a two way trust between the domains, I’m trying to work out how to use AD connect to replicate ...
0
votes
1answer
22 views
Using Azure AD users as Service Credentials on on-premises Windows Server
Is it possible credentials from Azure AD to configure a Service on Windows? This account would also access a SQL Server instance on another machine and run commands.
Assuming there's no on-premises ...
0
votes
0answers
49 views
Can't bind to Azure LDAPS
I'm trying to bind to Azure LDAPS with correct user creds.
I've generated a certificate on CertificateTools because Azure LDAP didn't want to accept a certificate that I tried to generate following ...
0
votes
0answers
9 views
Integrate Azure ADDS with Oracle Cloud Infra
I have below use-case -
Currently in my OCI infra one of the region datacenter is using RW AD domain controllers which further going to connect customer tenancies through VPNs and each customer ...
0
votes
1answer
72 views
Maximum expiration date of an Azure Service Principal credential password?
If you assign a Azure AD Service Principal to Azure (e.g. Azure Container Registry), what is the maximum expiration date of the credential password for that service principal?
Is it 1 year? Can you ...
0
votes
1answer
46 views
HAProxy - Redirect HTTPS for OAuth (Azure)
I need help to solve my issue.
What I want to achieve is
http://abc.contoso.com -> https://abc.contoso.com
(Force redirection HTTP to HTTPS)
My problem is that the URI needed for Azure OAuth 2.0 ...
0
votes
0answers
27 views
AzureAD OpenID Connect JWT “platf” claim value
I am setting up an application that will use AzureAD as an OpenID Connect IDP for authentication. I want to know if the authenticating device is an AzureAD "managed" or "compliant" device at the ...
0
votes
0answers
14 views
Grant Power BI Service Admin role to AAD Service Principal into O365 tenant
I'm setting up a Power BI auditing solution using an Azure Automation Account and the Power BI Powershell Cmdlets. In order to access PBI audit logs Power BI Services Admin role is needed.
This role ...
0
votes
2answers
70 views
Does Multi-Forest Azure AD Connect support forests with the same UPN suffix?
We have company A AD forest (forest domain a.com) and company B AD forest (forest domain b.com) linked by inter-forest trusts and each with On-Premises Exchange 2010 SP3.
We plan to migrate both ...
0
votes
1answer
89 views
Blazor app works with AAD auth locally, when deployed to Azure App Service get error after authenticating on redirect URL
I have a Server-Side Blazor app (Dotnet Core 3.1.2) that I am deploying to Azure App Services. The application authenticates users against our Azure AD. All works fine running locally on my machine.
...
1
vote
0answers
20 views
Domain migration with google cloud
We have set up user account synchronization with single sign-on feature between our Azure AD and Google Cloud by using UPN.
Recently we have purchased a domain to our company, want to change the ...
google-cloud-platform
0
votes
0answers
55 views
Effect of expired machine account passwords on Azure AD domain-joined status?
Does anyone know whether a domain-joined computer that's out of contact with a domain controller for long enough that its machine account password expires will also lose domain-joined status in Azure ...
0
votes
0answers
25 views
How can i use my microsoft account in my azure active directory
following these instructions: https://docs.microsoft.com/en-gb/azure/active-directory-domain-services/tutorial-create-instance
Background info:
Account subscription type is Visual Studio Enterprise – ...
2
votes
0answers
32 views
Migration to O365 using AADC with multiple forest: Anticipate AD objects with duplicate attributes
I am planning and preparing to migrate 2x AD forest (example.com and example.net) to Azure Active Directory.
I followed the Microsoft doc to use Idfix to clean up each of the AD forests. Initially, I ...
0
votes
0answers
253 views
AADSTS650052: The app needs access to a service (\“http://rts.powerapps.com\”)
I'm trying to debug a RapidCMS site locally. I use AAD to authenticate the user against my domain. For no apparent reason I am now receiving this error when launching my app:
Microsoft
Sign in
...
0
votes
0answers
19 views
Is it possible to sign in to Azure AAD with a Logic App or Function
Morning Folks,
My challenge is to provide SSO from a 3rd party application which uses a proprietary login function, to an Azure AAD authenticated web app.
On clicking the link, The 3rd party app ...
0
votes
0answers
18 views
VB connection to Azure SQL
Here is the code to connect to Azure SQL database using Active Directory but I can't connect to it. Am I missing anything ?I feel Azure AD is different but not sure what is that I am missing.
It ...
3
votes
1answer
72 views
What happens to Teams chats/discussion when an AD user is deleted and re-added?
I am experiencing mailbox issues with a user account in Office 365. My users are sync'd from my on-premise Active Directory using the Azure AD Connect application. I think I can resolve the issue by:
...
0
votes
0answers
35 views
login.microsoftonline.com password screen blank in Azure DevOps pipeline
When running end to end tests in an Azure Pipelines (windows-2019), we have to sign in to our app using the Azure AD login https://login.microsoftonline.com/company-name/oauth2/authorize-xxxyyyzzz.
...
0
votes
0answers
51 views
Azure registration fails after successful authentication
When attempting an Azure registration, authentication succeeds as shown in the sign-in logs:
However, after successful authentication the message "Just a moment" spins for a long while, and then "...
0
votes
0answers
45 views
AWS Active Directory Connector and Azure Active Directory Domain Services
I am trying to replicate the steps in this post. However, When I get to the step where I create the ad connector, it fails with the following error:
DNS unavailable (TCP port 53) for IP: 10.0.0.4, ...
0
votes
0answers
254 views
Users in Admin Center not in sync with users in Teams Admin Center
being fairly new to azure cloud I'll explain the issue the best I can.
In Admin Center (admin.microsoft.com) there's a tab in which I created a user (user A), to give him access to teams (licenses ...
1
vote
0answers
47 views
Enabling extension properties on Azure AD users
We're running a pretty standard hybrid environment with a local AD that syncs to Azure AD. I've been tasked with adding some information into an attribute that isn't currently supported in Azure (...
0
votes
0answers
85 views
PowerShell copy one user's license to another user
I need to enable a ton of users for "A5 for Faculty" but just the "Microsoft 365 Audio Conferencing" feature.
I went to one user and manually enabled just that. Works, no problem. If I look at ...
0
votes
1answer
23 views
How to refresh Azure AD admin roles on local computer?
My organization is using Azure AD and lately my user account privileges have changed from a normal user to a global administrator.
On some computers though I do not have administrator access when I ...
0
votes
1answer
80 views
Active Directory Azure - Password WriteBack
I have a small and maybe silly question in regards to Azure AD, when the password is changed in Azure using for example SSPR, how long does it takes to writeBack the password to AD, considering that ...
0
votes
0answers
68 views
Azure AD: Accepted invitation user: This username may be incorrect
We have a Sharepoint site that we invite B2B users to access through Azure AD invited users.
There is one user who has twice now, got the following message:
This username may be incorrect. Make ...
0
votes
0answers
69 views
LogonError Description: TemporaryRedirect
I have data that is being ingested into a SIEM. I am getting a reoccurring failed logon attempt as LogonError: TemporaryRedirect.
I don't quite understand the meaning of "TemporaryRedirect." Looked ...
0
votes
0answers
60 views
Azure AD - Sign-in Logs showing failures outside allowed hours
We have a group policy in our local Active Directory that restricts users from logging in outside of particular hours. The sync service is running between our Active Directory and Azure AD, so I'd ...
0
votes
0answers
48 views
Connecting Azure AD to Cloud Cloud
So I am currently using Azure AD and using Azure itself as a whole.
I use Azure to do the following:
Host the web application (It's written in .NETCore)
Blob storage
Azure functions
DevOps
I use ...
0
votes
0answers
9 views
Azure AD Tennat app authorization on an AD Group?
I have created an app that successfully allows a Administrator to authorize the app for all users within an organisation to access their calendar data. However is it possible to authorize it for only ...
0
votes
0answers
40 views
Authentication Failed for get file using file service REST API Azure
I am trying to get a file using the shared key. I already get a list of files and directories by the shared key, but when I request to receive a specific file, I encounter this problem.
Code to ...
0
votes
1answer
34 views
AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress
I'm developing SSO using SAML and my IdP is Azure.
I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID:
<NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
0
votes
0answers
12 views
Require Azure AD logon to access IPs controlled by a Network Security Group
I've got a few VMs set up with public IPs, and a NSG restricted to certain IPs (work VPN, a few home IPs and similar). Rather than whitelisting specific IPs/ranges, is it possible to somehow require ...
0
votes
0answers
49 views
Missing single sign-on tiles and application proxy error in Azure Enterprise App
I'm trying to add AAD Application Proxy settings to an existing enterprise app registration using integrated windows authentication (IWA) for single sign-on. I suspect this app was registered ...
0
votes
1answer
30 views
What is “redirect write” in Active Directory?
I'm looking at setting up ADConnect to sync users into ADAzure and found the following warning:
Azure AD Connect does not follow any write redirects
On the follow page:
https://docs.microsoft.com/...
1
vote
0answers
43 views
Communicate two azure tenants
I need to communicate two tenants azures.
The first one contains a bus service. The second contains Dynamics crm.
How can I do this knowing that the first tenant does not allow external access via ...
1
vote
1answer
90 views
Use user (and not service account) token for kubernetes dashboard
I've a Kubernetes deployment on Azure (AKS) and I also deployed the k8s dashboard.
I've connected the k8s deployment to our Azure Active Directory (AAD) so we can use the kubectl command with our AAD ...
0
votes
1answer
54 views
Which licence covers all of Intune, Azure AD Premium and Office 365?
Not sure if this is the right stackexchange forum for this question, but I am wanting to deploy Azure AD Premium, MS Intune and Office 365. Is there one licence that covers all of these?
From what ...
0
votes
1answer
68 views
Create an Azure AD with different On premise AD name
I'm trying to connect my On premise AD name : DOMAININT.ORG to my azure ad with a domaine name : DOMAINE.org.
On my office 365 all my user have their email adresses.
All configuration are good, i ...
0
votes
1answer
25 views
Will IP changes trigger reauthentication for Microsoft Conditional Access MFA?
I am currently implementing Azure Conditional Access for a large group of users. Everything looks good, but we are getting complaints that people need to reauthenticate to often. We have configured ...
0
votes
1answer
132 views
Azure Active Directory Password Policy
I am using AADDS.
I have created a custom FGPP in active directory with a precedence of 1 and applied it to "Domain Users". I changed the minimum length of a password to 14 characters.
This forced ...
0
votes
0answers
42 views
Azure AD Connect - Hide Groups
I would like to do something similar as in the article below, but for groups, but the groups don't have the "msDS-CloudExtensionAttribute1" or any of the cloud extension attributes in on prem AD.
...
