Demo Tenant: AAD cloud identities unable to log into ADDS, onprem devices

thtgrldiana 21 Reputation points
2020-06-08T16:54:48.68+00:00

My Cloud identity, AAD users are not able to log in to my On-premises devices locally or with their AAD UPN. I am not sure how to add the (m365xNnNnNn.onmicrosoft.com) users to allow for logging into the device. Is there a single or group of GPO configurations I may have overlooked. I'd love step by step or a link to the appropriate article(s). I have configured my Demo environment.

ADDS-with custom domain
Work station is Domain joined
Azure AD Connect configured for SSO and PHS sync using this article
Work station is Hybrid AD Joined in Intune
Workstation is configured for allow log on for my onprem user OU and the remote user group
I configured SSO using this article

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,563 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,246 Reputation points
    2020-07-23T18:59:38.34+00:00

    To login to HAADJ device, user has to be in the local AD which is the identity provider for hybrid devices. For cloud only users, they can sign in to AADJ machine.