372,267 questions

Sort by: Updated
Updated Created Answers
1 answer

Parse, Read, Transform claims within IDP access token

Hello! I was wondering if it is possible to parse, read and transform claims from within the IDP access token to a custom output claim and send it over to the relying party. e.g. IDP (Azure AD) sends access token to B2C that has claim type of…

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,833 questions
asked 2020-08-12T21:25:44.82+00:00
code-surgeon 146 Reputation points
commented 2020-08-31T19:09:37.83+00:00
James Hamil 23,971 Reputation points Microsoft Employee
1 answer

On-Prem AD with Office 365 (3rd party IDP) implementing AD Connect

Looking to extend my on-prem AD with Azure AD. We currently have Office 365 sync via 3rd party IDP (Onelogin). Will Implementing AD Connect interrupt my current AD environment or my Office 365 (IDP (Onelogin) setup?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T00:31:01.017+00:00
Eddie Santana 1 Reputation point
commented 2020-08-31T19:09:00.83+00:00
James Hamil 23,971 Reputation points Microsoft Employee
1 answer

Can Azure CDN protect against known vulnerabilities?

We have a website https://ourwebsite.web.core.windows.net/ which needs to be made public(available on Internet for anyone) and did a Qualys scan using an external scanner on it which found 40 vulnerabilities. The website has static HTML, CSS is inside…

Azure Content Delivery Network
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,335 questions
asked 2020-08-13T01:51:36.797+00:00
Steve 66 Reputation points
commented 2020-08-31T19:08:11.917+00:00
James Hamil 23,971 Reputation points Microsoft Employee
2 answers

Unable to register Azure CDN as an app using Powershell

Dear support, I need your help with the below issue. I was trying to register Azure CDN as an app using PowerShell and I found this article "https://github.com/MicrosoftDocs/azure-docs/commit/080f0d88908a563b2c47759ac2b4facd38ec487b" and I…

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
38,481 questions
asked 2020-08-13T06:59:55.07+00:00
Nicen 1 Reputation point
answered 2020-08-31T19:07:25.15+00:00
James Hamil 23,971 Reputation points Microsoft Employee
2 answers

On-Premise integration not enabled (option to enable greyed out)

Hi there, I'm experiencing difficulties enabling password write back in Azure Active Directory as the option to enable in On-Premise integration is greyed out. I'm hoping to allow my users in an Office 365 Hybrid environment to change their password in…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T08:12:33.917+00:00
M G 1 Reputation point
commented 2020-08-31T19:06:20.303+00:00
James Hamil 23,971 Reputation points Microsoft Employee
2 answers

Problem signing out of azure portal

Request Id: ab10816a-d2a5-438d-b405-98e050b40801 Correlation Id: 0b964c2d-b0d6-4049-8e3d-b963e9727313 Timestamp: 2020-08-13T10:11:17Z Message: AADSTS90002: Tenant '483bc35e-31d9-46e7-bdf0-e9ce645b819c' not found. This may happen if there are no…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T10:24:05.473+00:00
Henning Møller 1 Reputation point
answered 2020-08-31T19:04:10.643+00:00
James Hamil 23,971 Reputation points Microsoft Employee
4 answers

Can I add UPN suffixes to AAD DS?

Hi folks, When using Active Directory Domains and Trusts to add UPN suffixes I see the following error message: "Windows cannot update the UPN suffixes. Insufficient access rights to perform the operation" I am signed into a AAD DS …

Microsoft Entra
asked 2020-08-13T11:11:28.067+00:00
Ali S 1 Reputation point
answered 2020-08-31T19:03:54.303+00:00
James Hamil 23,971 Reputation points Microsoft Employee
2 answers

Microsoft 365 secure score values

Hi, I am managing several customer tenants and looking for improving secure scores on each tenant. I have one customer tenant whose secure score is granted out of 821. But all the other tenants are scored based on a lower value (out of 62) and fewer…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T11:11:34.747+00:00
Ellewela Gamage Deeptha Madhuranga Samarasekara 6 Reputation points
answered 2020-08-31T19:03:39.87+00:00
James Hamil 23,971 Reputation points Microsoft Employee
0 answers

Change URL

See Subject

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,606 questions
asked 2020-08-31T16:56:01.033+00:00
Danielle Carroll 1 Reputation point
commented 2020-08-31T18:57:07.95+00:00
brtrach-MSFT 16,116 Reputation points Microsoft Employee
3 answers

Publish RDS with Azure Application Proxy without exposing RDGateway

Hi, I was recommended to publish my question here instead of twitter: https://twitter.com/MrRobama/status/1245059086955220992?s=20 Is there any way I can publish RDS with Azure Application Proxy and avoid exposing the RD Gateway on the internet? As…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-04-01T06:54:12.683+00:00
Robert Amartinesei 1 Reputation point
answered 2020-08-31T18:51:49.587+00:00
seth bestulic 96 Reputation points
1 answer

Filter on/Export MFA Fraud Reports

Hello, I see a similar, past question about this here, but was wondering if anything has changed since 2018. I have email notifications setup now, but am wanting to view past MFA fraud reports. Is there a way to filter Azure AD sign-ins that have…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T14:07:23.487+00:00
Madi 1 Reputation point
commented 2020-08-31T18:39:09.507+00:00
James Hamil 23,971 Reputation points Microsoft Employee
2 answers

On-Premise Active Directory to Office365 Azure AD

We are trying to move our On-Premise AD to the Active Directory that was made by Office365. I just want to confirm, if users on-premise have the same username as their Office365 username, they will be synced up with the correct Office365 user? So they…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T16:07:26.67+00:00
Joaquim Feit 1 Reputation point
answered 2020-08-31T18:38:34.657+00:00
James Hamil 23,971 Reputation points Microsoft Employee
1 answer

With graph api: Can I get a organizationID from a groupID?

If I have a groupID, (and tenantID), can I get an organizationID from that? I am able to user "/organization" endpoint to get the organization but I don't know which organization the specific groupID is from (I am assuming that some users have…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-13T23:19:45.153+00:00
Karen Adams 76 Reputation points
commented 2020-08-31T18:37:40.29+00:00
James Hamil 23,971 Reputation points Microsoft Employee
1 answer

VM Join Domain Error via WVD Deployment

Chat support and myself cannot figure out how to fix this error. We have a single VNET, single tenant, Azure AD Domain Services domain we are trying to join. The user I am using to join the domain is a global admin and was created in our single tenant in…

Microsoft Entra
asked 2020-08-28T15:53:29.853+00:00
Wayne 1 Reputation point
commented 2020-08-31T18:37:38.893+00:00
Wayne 1 Reputation point
0 answers

Azure PIM role activation time settings to all subscription

HI Team, I want to check what is the activation time set for each PIM role and update the new time to all subscriptions using powershell. Can you please share your taught and share if any script handy Thanks Reddy

Microsoft Entra
asked 2020-08-14T09:59:59.797+00:00
Reddy, Vasudev Gundam 1 Reputation point
commented 2020-08-31T18:30:48.1+00:00
James Hamil 23,971 Reputation points Microsoft Employee
4 answers

[Autopilot] How to get User that performs enrollment during Autopilot Device Preparation phase

Hi, I want to apply different 30+ regional settings during Autopilot Device Preparation phase based on user that enroll the device. Is there a way to find that info on computer during Autopilot Device Preparation phase? Thank you in advance. …

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,337 questions
asked 2020-08-14T15:11:55.557+00:00
Darko Kljajic 31 Reputation points
answered 2020-08-31T18:30:13.027+00:00
James Hamil 23,971 Reputation points Microsoft Employee
0 answers

OAuth2 access token received from login.microsoftonline.com not working for on behalf of flow for azure devops api

Hi, I registered an application in Azure Active Directory, granted permission to access Azure DevOps. As I understand it is possible to use the access token that I got from login.microsoftonline.com to request another access token for Azure…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-14T15:22:19.413+00:00
antonio.mittielu 1 Reputation point
commented 2020-08-31T18:29:42.06+00:00
James Hamil 23,971 Reputation points Microsoft Employee
4 answers

Application Conditional Access just not working...

I cannot seem to get application based conditional access working at all. We have a third-party application provider that has Microsoft Authentication enabled and this appears in our Azure AD under Enterprise Applications. I have setup a basic…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-14T17:55:40.87+00:00
M Jones 26 Reputation points
answered 2020-08-31T18:29:06.343+00:00
James Hamil 23,971 Reputation points Microsoft Employee
1 answer

Shopify Enterprise Application

I added the Shopify application under Enterprise Applications (not Shopify Plus). However after I select Password Based SSO there's no other option to configure. I don't see any option to select manually detect sign-in fields. I tried following this…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,198 questions
asked 2020-08-26T22:57:09.333+00:00
Pretzky 1 Reputation point
commented 2020-08-31T18:28:08.663+00:00
Shashi Shailaj 7,596 Reputation points Microsoft Employee
2 answers

Windows 7 Embedded life cycle end date

Hello, can you confirm to me that Window Embedded Standard 7 version 6.1 build 7601 with SP1 ended support in January 2020? Or there is another date of end of life cycle of this OS? Thank you Miroslav Ježek – IT Leader T: +420.48.5229.301 …

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
38,481 questions
asked 2020-06-03T11:31:55.21+00:00
Jezek, Miroslav 1 Reputation point
answered 2020-08-31T18:23:38.24+00:00
Sean Liming 4,591 Reputation points