22,385 questions with Microsoft Entra-related tags

Sort by: Updated
Updated Created Answers
1 answer

Can you have two Entra IDs for two separate domains and a single tenant

We have a client that owns 2-3 domains under a single tenant. The parent company (companyA .com) and the child company (companyB.com) want to separate their Azure AD so companyB.com can be independent. They have 150 users in total all Azure AD joined. …

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-24T13:35:51.8633333+00:00
Carol Duvall 0 Reputation points
answered 2024-04-25T11:33:58.66+00:00
Carol Duvall 0 Reputation points
0 answers

Exclude Windows Hello for Business for SSO of Global Protect

Dear PPL, I have implemented Entra ID SSO and SAML for our organization VPN Portal login. Now some ppl complaining that Windows Hello for Business they set up on their devices somehow allow them to connect GP VPN without giving MFA.... I was wondering…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-23T03:06:56.98+00:00
Namless Shelter 216 Reputation points
commented 2024-04-25T11:17:58.74+00:00
Givary-MSFT 27,886 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Wrong SAML Claims for AppRoles

Hello, I am configuring the SAML claims for Enterprise Application in Azure. For the moment I have configured them like that: and I have tested connection to target app. Everything is fine and app can read custom_roles. Unfortunately additionally to…

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-17T06:43:27.99+00:00
Fraczek, Rafal SW/WRO-DCDZA 121 Reputation points
accepted 2024-04-25T11:14:26.2966667+00:00
Fraczek, Rafal SW/WRO-DCDZA 121 Reputation points
2 answers

How to restrict user access to a specific device

Is there a way to allow a specific user just to login on a given device ? Any other login tries should be blocked.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-21T14:39:15.67+00:00
Joel - Feluba 0 Reputation points
commented 2024-04-25T11:07:05.42+00:00
Sandeep G-MSFT 14,406 Reputation points Microsoft Employee
1 answer

Azure AD Connect service fail to start after ASR

Hello, I've recently added our Azure AD Connect server to Azure Sit Recovery. It was fully replicated recently, and I just completed a test failover in an isolated environment. For a few reasons it is not acceptable to allow this failover test version…

Microsoft Entra
asked 2024-04-23T15:35:59.81+00:00
AdamTyler-3590 70 Reputation points
commented 2024-04-25T11:05:59.57+00:00
Sandeep G-MSFT 14,406 Reputation points Microsoft Employee
0 answers

How can I seamlessly change an App Registrations "Application ID URI" domain?

I have a published teams app which includes tabs. The tabs point at Domain A to authenticate the user using "microsoftTeams.authentication.authenticate" and "microsoftTeams.authentication.getAuthToken()". The teams manifest.json…

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,061 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-25T09:54:11.6+00:00
Paul Hill (TMI Systems - Development) 15 Reputation points
edited the question 2024-04-25T10:53:11.7533333+00:00
OMMI NAVEEN KUMAR 195 Reputation points Microsoft Vendor
1 answer

Windows Active Directory setup in Azure

Hi, I plan to setup a Windows Active Directory (AD) using VMs (1 for PDC and 1 for BDC) in the Azure cloud environment and it should sync the AD in the on-prem via the established site-to-site IPsec VPN link. What are the pros and cons? Which is better…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,848 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-25T07:04:00.1+00:00
Archimedes S. Gaviola 0 Reputation points
edited the question 2024-04-25T10:51:41.0266667+00:00
OMMI NAVEEN KUMAR 195 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Azure AD B2C - List user accounts deleted and updated

We are using Azure AD B2C for all of our customer accounts. We want to identify the following for the last 5 days. Which user accounts were deleted. Which user accounts were updated. Questions Is there a graph API that will return the above…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,576 questions
Microsoft Entra
asked 2023-10-07T12:12:35.9566667+00:00
Tarkowski, Michael (M.) 156 Reputation points
commented 2024-04-25T10:48:31.8433333+00:00
Hassan Zaidi 0 Reputation points
1 answer

I want to leave an organization that I can't login into anymore

I have 2 organizations / tenants attached to my MS work account, but I want to leave one of them. Unfortunately when I try to leave it from my Account I need to login some other account that I no longer can access. How can I leave this tenant?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-22T21:00:04.89+00:00
Morsink, Markus 0 Reputation points
commented 2024-04-25T10:43:55.05+00:00
Givary-MSFT 27,886 Reputation points Microsoft Employee
2 answers

Enterprise applications: Microsoft Graph Command Line tools, How to restrict connection to Microsoft Graph and grant access to specific users

Hello team, I am trying to grant access to specific users to Microsoft Graph. the objective is to block public access in our tenant to Microsoft Graph. I tried using conditional access, however, in the apps to select, it doesn't show Microsoft…

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-24T23:59:06.3866667+00:00
Sergio Londono 301 Reputation points
commented 2024-04-25T10:38:58.79+00:00
Andy David - MVP 141.5K Reputation points MVP
2 answers

Entra on-premise password protection, without deploying Azure, hybrid environment

We have an on prem AD, with one way AD sync to M365 on E3 level. We are looking for clarification to the following question, want to know if it is possible to deploy Entra on-premise password protection, without deploying Azure/Entra AD?

Microsoft Entra
asked 2024-04-17T20:15:46.13+00:00
300cPilot 0 Reputation points
answered 2024-04-25T10:16:34.8433333+00:00
Akhilesh 4,770 Reputation points Microsoft Vendor
6 answers One of the answers was accepted by the question author.

Exchange 2019 installation Failed hybrid environment

I have an on-prem exch 2016 hybrid (on server 2012 r2 standard). All mailboxes are on O365. I'm setting up a new exch 2019 (server 2019 standard) so I can then get rid of 2016. It gets stuck on Step 8/12 Mailbox service. The system mailboxes are all…

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,346 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,886 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2022-11-04T01:09:20.777+00:00
jennylee 86 Reputation points
answered 2024-04-25T10:06:23.6333333+00:00
Pahan Mandara 0 Reputation points
0 answers

Can I set up a user in my Entra center that has access to other user's resources?

I am using microsoft graph to sync SF & outlook events and toDoTasks. However, app level permissions are not available for toDoTasks. I've managed to sync everything using delegated permissions when it comes to syncing these records from SF to…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,576 questions
Microsoft Entra
asked 2024-04-25T10:00:26.2166667+00:00
Aleksa Markovic 0 Reputation points
5 answers

NPS Extension for Azure MFA failing to generate MFA prompt

Hi I am trying to setup a new NPS server with the NPS Extension for Azure MFA to control access to an RDS server on-prem. Authentication works fine when not using the NPS Extension. With the NPS Extension enabled, the user does not receive an MFA…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2023-05-09T23:24:26.2+00:00
Warren Calvert 11 Reputation points
commented 2024-04-25T09:45:35.3733333+00:00
Andy May 0 Reputation points
1 answer

Problem with Exchange Server 2016 Hybrid Configuration (Teams Rooms Mailbox)

Good day, After setting up Exchange Hybrid (Classic Mode), the O365 mailboxes are not displayed in onPrem Exchange. Mails cannot be sent from onPrem to O365 either. In O365, the onPrem mailboxes are visible and mails can also be sent from O365 to…

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,073 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,886 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-23T07:53:21.2433333+00:00
Alex GER_146 5 Reputation points
edited a comment 2024-04-25T09:13:03.5+00:00
Alex GER_146 5 Reputation points
0 answers

Sync Entra with Google Admin

Hello, I am now doing some configuration with sync from Entra to Google Admin, just facing with some issues that for ex. i have some custom attributes on Google side how i can add the same custom attributes to Entra user and also to include this in…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-25T09:05:24.61+00:00
Ismayil Aghayev 0 Reputation points
3 answers

How to delete tenant "Default Directory"

I am trying to delete (or exit) my only Organization. after pressing "Delete": The problem is, I don't have any Licenses or Subscriptions. Also, I am the only one in the Organization. What do I do? Help

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-23T18:15:07.4533333+00:00
Martin Almeida 0 Reputation points
answered 2024-04-25T08:56:38.4133333+00:00
Sandeep G-MSFT 14,406 Reputation points Microsoft Employee
2 answers

How to add custom claims to the Access Token using custom user Attributes.

Good afternoon MS team, I am writing you because I am looking for information on how to add custom claims when the application is generating JWT token, but I can't add them to the AccessToken, but I can see them in the IDToken, . Questions: Can I…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-24T11:50:51.38+00:00
Malvaro 85 Reputation points
answered 2024-04-25T08:55:58.65+00:00
Sandeep G-MSFT 14,406 Reputation points Microsoft Employee
1 answer

Entra ID access

Not able to access Entra ID . I am the owner of account and have active student subscription

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-25T00:12:41.59+00:00
Sai Rakshith Reddy Yenimireddy 0 Reputation points
answered 2024-04-25T08:42:23.8366667+00:00
Sandeep G-MSFT 14,406 Reputation points Microsoft Employee
2 answers

What role will I have when I migrate a subscription to a new Tenant/Directory?

Hi All, Starting in September 2024 Classic Admins will be removed. I am wondering what is going to happen when I do a migration (directory change) of a subscription from one tenant to another. Usually the user who does the "Change Directory"…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
666 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
asked 2024-04-24T09:31:31.7566667+00:00
John Doyle 31 Reputation points
commented 2024-04-25T08:32:30.18+00:00
Sandeep G-MSFT 14,406 Reputation points Microsoft Employee