Issues logging into Admin console

Question

Our corpoate domain is synced with Microsoft 365 using ADFS. I am unable to login to Microsoft 365 using my corporate credentials. When I try logging in, I automatically get authenticated using domain.onmicrosoft.com credential and not domain.com credential. My corporate information is getting synced with domain.onmicrosoft.com and not domain.com.

FYI, I am Global Administrator with my corporate credential i.e. domain.com and normal user with domain.onmicrosoft.com.

Answer 1

@Fazal Ur Rehman Shah | فضل الرحمن شاة

Thank you for your time on the call today.

As per our troubleshooting you had an account in on-premises which was synced to Azure with new identity. Old account in Azure was still present and it was orphan.

We had to merge your on-premises account with your orphan account in Azure.

We moved the user to non-sync OU in on-premises so that Entra sync deletes the account from Azure AD.

Post that we removed all the admin role that were assigned to your orphan account in Azure.

Now we moved back your on-premises account to synced scope OU. We ran sync and now your on-premises account got linked with your orphan account in Azure AD.

Now you are able to login to Azure portal with your on-premises account which is federated with ADFS.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.