Translate resource tenant ID to name

Mongoose 36

Our sign-in logs show numerous successful single-factor authentication logins even though we enforce multi-factor authentication. The details for these indicate the user is connecting with an external resource. It gives the resource ID and resource tenant ID. I would like to be able to determine what company has this ID. I found numerous posts on how to obtain my own tenant name, but nothing on how to obtain another tenant's name. I view this as similar to whois for internet domain names. How can I determine the name of an entity with a specific tenant ID?

risolis 8,741 Reputation points

2022-05-10T20:02:01.03+00:00

Hello @Mongoose

Thank you for your post,

I believe you stated that you were using this https://www.whatismytenantid.com/ but it not the one you need... Am I correct?

Also, Do you have access to Partner center web page?

BR,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Accepted answer

risolis 8,741 Reputation points

2022-05-24T21:41:50.003+00:00

Hi @Mongoose

Thank one more time for your reply back.

If you want to use a P1/P2 license, for instance you can activate a Free trial for P2 license and then run the command.

Regards,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

6 additional answers

Joan Badell 16 Reputation points

2023-01-10T19:47:35.72+00:00

Hi @Mongoose .

Have you found an answer for your problem?

I have the same problem, and perhaps I have found a solutión to find the tenant name associated with the resource tenant ID.

In the Azure Active Directory Admin Center you can go to administer External Identities. If you add a new organization and type the tenant ID, you can view the tenant name.

Regards, Joan Badell
Please sign in to rate this answer.

3 people found this answer helpful.
Hector Bas 26 Reputation points

2025-02-04T20:37:26.7233333+00:00

The direct api equivalent of this is to use the below graph endpoint:

GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}')

Here's a direct link to test in MS Graph Explorer, which worked flawlessly for me, just make sure to add the CrossTenantInformation.ReadBasic.All permission.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
risolis 8,741 Reputation points

2022-05-11T03:40:25.49+00:00

Hi @Mongoose

I was doing a quick check on your concern and I wonder if you need any other detail to get this going....

BR,
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Mongoose 36 Reputation points

2022-05-11T12:57:26+00:00

I know my own tenant ID and name. I am attempting to determine the tenant name for an external tenant to which some users are authenticating. The sign-in logs show users connecting using application Microsoft Teams Web Client. The Cross tenant access type is B2B collaboration. The resource tenant ID is also listed. I am attempting to determine the tenant name associated with the resource tenant ID. I want to know the external company to which our users are connecting.

I may not have access to the Partner center web page. Can you send a link so I can test it?
Please sign in to rate this answer.
risolis 8,741 Reputation points

2022-05-11T18:20:01.317+00:00

Hi,

Remember that this might be for CSP/MSP profiles but this is a great way to get the info needed!

https://partner.microsoft.com

BR,

Mongoose 36 Reputation points

2022-05-13T12:00:44.85+00:00

Thanks for the link. However, I do not see how I can use this to obtain information about another tenant. Can you please elaborate on how I can use this tool to translate the tenant ID of another tenant into that tenant's name?

risolis 8,741 Reputation points

2022-05-14T21:35:46.947+00:00

Sure...

But I do have a question before... Are you working for a MSP/CSP identity?

Regards,

Mongoose 36 Reputation points

2022-05-16T12:17:55.967+00:00

No, I am not. I'm just trying to figure out a way to determine the external companies to which users are authenticating without having to get the information from the user. It seems there must be a way to perform some sort of lookup based upon the tenant ID. This is basic information.

risolis 8,741 Reputation points

2022-05-17T17:40:06.153+00:00

Well there is a easy way to check this.... For this, you can go to activity log or signs-in logs from the Azure Active directory.

Also, If you were part of this MSP/CSP partner program you would be able to see it from there along with azure lighthouse.

Let me know if any other detail is needed for your concern.

Have a good one!

BR,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Mongoose 36 Reputation points

2022-05-18T17:27:24.8+00:00

The sign-in logs do not give the information. That is where I found the resource ID and resource tenant ID, but neither is useful. That is what prompted my original question. How can I find the tenant name that corresponds to the tenant ID I obtain from the sign-in logs. The Activity Log displays no records for the past month, so I don't know the purpose of that report.

risolis 8,741 Reputation points

2022-05-19T03:03:06.603+00:00

Hi,

Thanks a lot for your answer.

Hoping this makes more sense now.

https://learn.microsoft.com/en-us/azure/active-directory/external-identities/cross-tenant-access-overview

Regards,

Mongoose 36 Reputation points

2022-05-23T18:37:12.23+00:00

I just want to let you know I am attempting to test this. I am having difficulty getting the prerequisites to run the Get-MsIdCrossTenantAccessActivity command. I have installed the .NET Core 3.1 SDK and Microsoft Graph module, but the command is still not recognized. Still diagnosing this issue in order to see if it will resolve my original issue.

Mongoose 36 Reputation points

2022-05-23T19:09:19.893+00:00

I have not been able to make the Get-MsIdCrossTenantAccessActivity command work. However, I was able to use the process of adding an organization through External Entities->Cross-tenant access settings to obtain the desired information. Thank you for your help.

risolis 8,741 Reputation points

2022-05-24T03:34:07.76+00:00

Great news from you.

Well done @Mongoose

Have a good one!

Best Regards,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Mongoose 36 Reputation points

2022-05-24T18:58:41.637+00:00

I finally successfully ran the Get-MsIdCrossTenantAccessActivity command. unfortunately, it requires a Premium P1 or P2 license, which we do not have.
As for upgrading to 5 stars, while this thread did point me in the right direction, it was a very round-about and labor intensive exploration to find the answer to my question.

VM 1 Reputation point

2022-12-29T19:11:48.303+00:00

Hey Mongoose, inside of "External Entities->Cross-tenant access settings," where did you find the name of the external tenant? We have "0 organizations found" under Organizational settings although I see several Outbound Sign-ins in the Cross-tenant access activity workbook. Like you, I can only find the GUIDs but not their domain.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
James Hamil 26,976 Reputation points Microsoft Employee

2022-05-24T01:34:10.403+00:00
Hi @Mongoose , can you please try the command you listed below after installing these modules? It worked for me after this.

Install-Module -Name Microsoft.Graph.Authentication -Repository PSGallery Install-Module -Name MSIdentityTools -RequiredVersion 2.0.3

For the "name" you are referring to, are you asking about a name from the following image?

Or is "name" referring to something else? Please let me know and I can help you further.

Thank you,
James
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Translate resource tenant ID to name

6 additional answers

Your answer