question

TimHardy-4699 avatar image
1 Vote"
TimHardy-4699 asked rexekeblad edited

Enterprise Application missing "Users and Groups" nav item

I just created two Enterprise Applications in Azure. Right after I create them, they have the following options...
alt text


After editing the redirect URIs on the App Registration that gets created, adding some API permissions, and a client secret, when I go back to the Enterprise Application, I'm missing several menu items, including "Users and Groups"...

alt text



What happened to "Users and Groups"?

azure-ad-user-provisioning
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

This should not happen . It might be some transient issue with UX . Could you please update us if you are still facing this issue ?

0 Votes 0 ·

We have the same problem. Some of our applications have "Users and Groups", but multiple others does not. Would be very happy if there were any solutions to this.

0 Votes 0 ·

@ShashiShailaj-MSFT Yes, we've noticed this behaviour too and can confirm that Tim's answer is exactly how we have to work around the issue.

0 Votes 0 ·

1 Answer

TimHardy-4699 avatar image
1 Vote"
TimHardy-4699 answered rexekeblad edited

After a great deal of trial and error, I've determined that the following setting under the App Registration determines whether "Users and Groups" shows up on the Enterprise App...

Authentication -> Default client type -> "Treat application as a public client"

When that is set to "Yes", "Users and Groups" goes away. When it is set to "No", "Users and Groups" comes back. This is the exact setting that is controlling this behavior in my scenario.

Hope that helps someone else.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for detailing this here Tim, we experienced the exact same issue and your post likely saved us a lot of time.

It seems however like the roles set in Users and groups persist even though the ways to change these settings are disabled. Trying to refresh the url for the page of Users and groups while "Treat application as a public client" is set to "Yes", just left me with three pulsating dots.

So it doesn't seem to be a simple case of the URL's just vanishing, giving me a hint of this behavior being by design, the question is just the why, as we can still see the effects of our config in Users and groups even though it's disabled in the portal.

0 Votes 0 ·