question

azurepete-6753 avatar image
0 Votes"
azurepete-6753 asked amanpreetsingh-msft answered

admin account assigned a strange UPN in new directory

so my primary microsoft/azure account is like first.last@myprimary.com

I created a new tenant, new active directory and associated it with a .com domain, like mysecondary.com

I went to configure Azure AD Connect from my mysecondary.local and it would not run with using my primary azure account to log into to azure while the configuration is running.

I created a second admin account in the new tenant, SyncUser@mysecondary.com, and everything ran just fine.

While troubleshooting why the configurator would not log in with first.last@myprimary.com I noticed the upn for that account in the Azure Active directory is:

"first.last_myprimary.com#EXT#_firstlastmyprimary.onmicroXYHMW#EXT#@mysecondary.onmicrosoft.com "

I assume that is why I couldn't login into to that azure AD.

Why is the UPN for my Azure account that crazy string in my new Azure AD?

azure-ad-user-management
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

The UPN for my primary/admin account in the default tenant/Default Directory is

first.last_myprimary.com#EXT#@firstlastmyprimary.onmicrosoft.com

0 Votes 0 ·

1 Answer

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered

Hi @azurepete-6753 · Thank you for reaching out.

This UPN format is expected when a user is created as an External/Guest user in a directory. For example, when we invite user@gmail.com as a guest to our tenant contoso.onmicrosoft.com, the UPN of the user will be user_gmail.com#@contoso.onmicrosoft.com

Users will get UPN like user@contoso.onmicrosoft.com when you create member account. An user@contoso.com UPN can be assigned when contoso.com is added as a verified domain in contoso.onmicrosoft.com tenant.

Reason why you UPN of your primary admin account is first.last_myprimary.com#EXT#@firstlastmyprimary.onmicrosoft.com because if you created your tenant with user
first.last@myprimary.com, the domain myprimary.com was not a verified domain and the user was added as external user in the directory.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.