418,945 questions

Sort by: Updated
Updated Created Answers
3 answers

Connecting with Azure SQL Managed Instance Managed Identity from MSBuild to run SQL scripts

I have an application that has a complex MSBuild system that executes .SQL scripts against SQL databases stored in a SQL Managed Instance (SMI) in Azure Gov. This is process is being executed from a GitLab CI/CD pipeline. I can execute it without issue…

Azure SQL Database
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-16T23:09:49.717+00:00
Sam Larko 1 Reputation point
commented 2020-11-26T00:31:02.69+00:00
JamesTran-MSFT 36,816 Reputation points Microsoft Employee
7 answers

I really need some detailed help upgrading domain controllers so we can look at moving to Azure

So we have 3 Domain controllers in our AD structure. 2 are running on servers that have Server 2008 32 bit installed. One of these is our Global catalog. I also have a server running 2012 64 bit. Now I inherited the responsibility of these machines. All…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-07T17:48:24.36+00:00
Joe Cimadamore 1 Reputation point
commented 2020-11-26T00:30:30.28+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

how can i delete domain user

I want to delete domain in 'admin.microsoft.com' but I cant. because for delete this domain, I have to pre-delete users. but I already delete on-premise ad in Azure IaaS. how can i delete users and domain?? please help me

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-09T02:47:31.643+00:00
최근창 1 Reputation point
commented 2020-11-26T00:29:11.803+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

How can we get the initial Azure AD setup for Credit Europe Bank N.V. for our Office 365 E3 licenses we have.

Credit Europe Bank N.V. currently has for Amsterdam 59 office 365 E3 licenses, with this licenses i would like to create an Azure AD environment. How can I arrange it that ******@crediteurope.nl becomes a global admin for that Azure AD domain?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-17T17:04:27.53+00:00
Service desk 1 Reputation point
commented 2020-11-26T00:29:03.013+00:00
JamesTran-MSFT 36,816 Reputation points Microsoft Employee
1 answer

Azure B2C - Maintain a login session and manage access tokens in a SPA (React)

Hi 1) We are using Azure B2C to manage external users sign in, sign up, password reset, MFA for a Single page app . Currently we are using MSAL 2.2.0 (tried 2.4.1 as well) to login the user using the msal.loginredirect flow. Once the user is logged in ,…

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
3,065 questions
asked 2020-11-09T04:20:16.07+00:00
Sharat Menon 1 Reputation point
commented 2020-11-26T00:29:01.747+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

Enterprise Applications vs All Applications

I think understand the difference. But here is one scenario I don't get. Let's say Tenant-Blue has BlueApp, clientID is "blue". Now I goto Tenant-Yellow and search for "BlueApp". (It was rumored that an admin of Tenant-Yellow…

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,426 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-09T06:00:31.157+00:00
JAL 591 Reputation points
commented 2020-11-26T00:28:52.863+00:00
James Hamil 27,001 Reputation points Microsoft Employee
2 answers

Non admin laptop account for students

I've just setup our on prem 2019 server to sync with Azure AD. When I log into a laptop from the OOBE the student account logs in fine but is an Administrator on the laptop. How can I set it so they are just a user on the laptop?? Thanks!

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
asked 2020-11-17T19:23:08.92+00:00
Edward Crist 1 Reputation point
commented 2020-11-26T00:28:47.587+00:00
JamesTran-MSFT 36,816 Reputation points Microsoft Employee
1 answer

MFA setup not going through.

Verify your identity Sorry, we're having trouble verifying your account. Please try again. View details The call to verify option isn't responding too. Then, the troubleshooting information shows this; If you contact your administrator, send this…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-18T11:34:01.837+00:00
Michael Ekweogwu 1 Reputation point
commented 2020-11-26T00:26:36.707+00:00
JamesTran-MSFT 36,816 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Location mapped to IP in MCAS (Microsoft Cloud App Security) is different from Azure AD Sign-ins

I've seen several instances where the location mapped to IP in MCAS (Microsoft Cloud App Security) is different from Azure AD. For example, MCAS mapped IP 185.247.70.52 to Romania and Azure AD mapped location to Dallas, TX. This triggered false positive…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-11T14:58:05.417+00:00
Pablo Gallegos 21 Reputation points
accepted 2020-11-26T00:26:29.34+00:00
Pablo Gallegos 21 Reputation points
1 answer

Azure Active Directory Domain Services with a file server

Hey Everyone, i am have used Azure Active Directory Domain Services with azure file shares but never before with an actual file server. I know i can attach the new file server vm to the Azure Active Directory Domain Services domain, but can i set up…

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-09T18:13:50.373+00:00
stavros mitchell 56 Reputation points
commented 2020-11-26T00:24:24.923+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

Where can I download my MFA recovery token codes ?

Greetings, When activating TOTP on my account, there was no link to download my recovery tokens (as codes). Searching through my profile and official documentation, nothing to be found. It means that, if my device is lost, or if the database…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-11T00:09:20.84+00:00
Jules (ArchPhoenix Team) 16 Reputation points
commented 2020-11-26T00:24:01.947+00:00
Jules (ArchPhoenix Team) 16 Reputation points
0 answers

Azure Active Directory Domain Services (AADDS) - Replica Sets preview duration

I have a need to enable AADDS Replica Sets, which is currently in preview. I am having a hard time figuring out how long this preview will last and whether we should use this or not. I know that guessing at Preview duration is a fool's errand, but I…

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-09T20:03:43.863+00:00
NWMikeG 1 Reputation point
commented 2020-11-26T00:23:47.337+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

Looking for a Python/Django/Djano-REST-Framework library to verify access_token from Azure AD

This has been a real frustrating struggle for several days now and I need to get it wrapped up. So in my app, and how I understand this should work in all microservice applications, the flow is the following: User navigates to…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-09T20:09:34.067+00:00
cjones 21 Reputation points
commented 2020-11-26T00:23:31.873+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

acquireTokenSilent() returns an access token signed by the wrong key

I have an SPA that uses MSAL (msal-browser@2.7.0) to authenticate against Azure AD B2C. I call loginRedirect() and everything works as expected. Once the redirect comes back, I save the account information in handleRedirectPromise() and then use…

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
3,065 questions
asked 2020-11-24T20:05:11.757+00:00
Mark 1 Reputation point
commented 2020-11-26T00:21:15.657+00:00
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,496 Reputation points
1 answer

How is the sub claim in the userinfo OpenID endpoint established?

Hi, When I register an app in AAD, and then perform an OAuth2 / OpenID authentication, and then query the OpenID userinfo endpoint (https://graph.microsoft.com/oidc/userinfo) with the access_token, it returns a JSON like this: { …

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-18T14:50:18.417+00:00
Ted van der Voorde 1 Reputation point
commented 2020-11-26T00:19:47.57+00:00
JamesTran-MSFT 36,816 Reputation points Microsoft Employee
2 answers

New-AzRoleAssignment to assign Billing account reader role to billing account

Hi, I'm reading through the docs (https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azroleassignment?view=azps-5.1.0) and have tried multiple commands but am unsure how to do it correctly, or if it is even possible to assign the…

Azure Cost Management
Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
3,092 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2020-11-18T17:26:02.713+00:00
Sean Belling 1 Reputation point
commented 2020-11-26T00:19:03.497+00:00
JamesTran-MSFT 36,816 Reputation points Microsoft Employee
1 answer

Azure Active Directory - Logout ( Mendix )

We are trying Create Single Sign On application using Azure Active Directory and Mendix The SAML Configuration is given below. ![38570-saml.jpg][1] We are able to login with the Microsoft account but the actual problem comes when we tried to…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,539 questions
asked 2020-11-10T10:56:18.75+00:00
Giridharan M 6 Reputation points
commented 2020-11-26T00:18:54.087+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

Input-Field "Who can consent?" is missing in edit/new pane of custom scope. "AD B2C"/"Exposed API"/"Add Scope":

If i edit/add a "scope" of an "exposed api", normally i have to choose between "Admin" or "User and Admin". The Input-Field is missing, so i just can add a "Admin" scope. For me it looks like an…

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
3,065 questions
asked 2020-11-10T11:19:27.207+00:00
Norman Philipp 1 Reputation point
commented 2020-11-26T00:18:44.613+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

know if key vault is platform or customer managed

How do I tell if a VM, or a backup is encrypted using a platform managed or a customer-managed key vault? I have a client who has multiple VMs, and uses Azure to backup in a different region and has established at least 1 key vault. How do I tell what…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,387 questions
asked 2020-11-10T14:24:08.457+00:00
Lynette Patterson 1 Reputation point
commented 2020-11-26T00:18:13.633+00:00
James Hamil 27,001 Reputation points Microsoft Employee
1 answer

Azure AD B2C using access token produced by password reset policy

I have a custom password reset policy in Azure B2C. Q1: is that possible to use access token emitted by the policy in my FE application (MSAL.js v2)? Q2: is that possible to include email address as a claim of the token produced by my policy?

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
3,065 questions
asked 2020-11-10T15:59:55.147+00:00
Vasilii Aleksandrov 16 Reputation points
commented 2020-11-26T00:18:02.25+00:00
James Hamil 27,001 Reputation points Microsoft Employee