How do I turn off MFA for a Single Application
In our Azure environment we have several Apps. For most of our applications, MFA is the way to go. But we have a low impact application (build with Blazor) where we do not require MFA, a simple (Entra) login would do as there is no risk in this…
Connect-MgGraph
I want to connect to Azure MS Graph using an Azure Service Principal. How can I generate a certificate for the Azure Service Principal? I have the Client ID and Tenant ID. I need to fetch users information from Azure AD, and I have the required Graph API…
MFA Prompts Hybrid Setup
MFA Prompts Hybrid Setup We've recently rolled out MFA across our organisation, and I'm trying to understand how we can implement this without friction. We currently have a hybrid Entra AD setup with Microsoft Entra Connect installed on a DC, and…
Azure active Directory Authentication
Hello, guys How can i disable Azure active Directory Authentication?
Conditional Access Policy Name Location
Hello, I have conditional access policy to allowing some users only can access from Indonesia only. This policy is working from long time ago. Now i have one user complain that he not able to access to the M365 from their home. I can see in the log the…
Azure Connect Error with single user
I have an on-prem AD and have a sync issue on a single user which happens to be my account. I've tried forcing a full replication and unable to figure out why it's not syncing. I'm guessing that perhaps I've changed something in Azure that it let me,…
Full migration of On premise Active directory to Azure
Hi My customer is running Hybrid Active directory environment. Now he wants to decommission on premise active directory. Can you tell me what steps are required for the full active directory migration? thanks Regards
Microsft Graph Error: ClientSecretCredential authentication failed: AADSTS9002331: Application 'xxxxx' is configured for use by Microsoft Account users only. Please use the /consumers endpoint to serve this request.
I need to send emails from a desktop application. I have read a lot of threads about this matter and using the codes shared all over internet to send email using microsoft graph with no luck. I'm using my personal outlook account to be used within the…
Installing Entra Connect on Windows Server Core
Is it possible to deploy and install Entra Connect on a Windows Server Core version?
problem accessing tables
We had return tables and directories, but now when we log in it gives the error AADSTS7000112. Here are additional details: Request Id: 5da0c86f-65d4-4b0f-9021-056947946c00 Correlation Id: df5e67a1-4082-7000-243d-cd5f13b6dc9f Timestamp:…
Maximum number of secrets reached
First question/post, so I apologize if not in the correct category. I'm using Microsoft Entra (within the admin center). I'm attempting to add credentials to a new Enterprise Application (Users and Groups -> Update Credentials) but I'm getting this…
How to prevent Group Owners from deleting a group
I have a group in Entra for managing users who do not have MFA. in this group I added our service desk membes (they have Helpdesk Admin roles in Azure) as owners to be able to add/remove members but one of them accidentally deleted that group. how do I…
How to disable consent on behalf of organization
My application needs to subscribe to a number of other user presences. Therefore I request a permission Presence.Read.All When admin accesses the authorize endpoint in the UI I see a checkbox Consent on behalf of your organization. So I have questions…
command is not recognized.
i have installed the below powershell modules.I am getting error when i execute Get-AzADSubscribedSku command please guide me. Install-Module -Name Az -AllowClobber -Force Install-Module -Name "AzureAD" Import-Module AzureAD
Change the language settings for Entra ID and Microsoft 365 service for all users?
Hi, Is it possible to change the language region for all users and devices in Entra ID tenant? For Domain AD, it can be via GPO, but for Entra ID (Azure) and it's for all Microsoft 365 services like OneDrive, SharePoint, Office suite, and other…
Login with Employee ID
Hello, We are using the SAP Cloud Identity Service and the SAP Cloud Identity Provisioning Service. We provision users from Entra ID to SAP IAS, and then the users are provisioned to cloud applications. The users that are provisioned from Entra ID are…
How can I include an email claim in an Open ID token for the managed account in Entra ID?
I registered a multi-tenant application in my own tenant of Microsoft Entra ID. I configured email and openid as API Permissions. I tried the device code grant flow with this application. I specified email and openid as scope in the v2.0/devicecode…
Azure AD: how to update user's ImmutableId without AzureAD module nor MSOnline module
I am AD and Azure AD Administrator. I want to sync an existing Azure AD account with a newly created on-premises AD account in an environment where: OnPremisesImmutableId is empty for all Azure AD accounts. Azure AD Connect currently uses objectGUID for…
Azure Files identity-based authentication over SMB using Microsoft Entra Domain Services authentication for cloud-only identities
Hello, I'm looking for some advice on this hypothetical scenario. Suppose I have a cloud-only identity which is a security group in Microsoft Entra named Group1. I have a Azure Files fileshare named share1. I want to be able to grant Group1 Azure RBAC…
Step-by-Step Guide for Implementing Enterprise Policy as Code (EPAC) using Terraform for ISO 27001 Compliance
Hello Community, I'm working on implementing Enterprise Policy as Code (EPAC) using Terraform for regulatory compliance with ISO 27001 in an Azure environment. This is my first time working with EPAC, and I am new to the concept of policy implementation…