AD/Entra Sync to Entra External ID
Hi all We are setting up an Entra External ID, for enabling customer login on our customer sites. We also have a separate Entra ID with employees, who should also be able to use their employee login on the customer sites. This is an on-prem AD synced to…
Unable to register USB Security Key - We detected that this particular key type has been blocked by your organization. Contact your administrator for more details and try registering a different type of key.
From this page: https://mysignins.microsoft.com/security-info I received this error when trying to register the USB security key for my account. We detected that this particular key type has been blocked by your organization. Contact your administrator…
How do you add translations to the globalexception page on Azure AD B2C using custom policies
Hi, I am make using of Azure custom policies and am unable to find out how to translate the globalexception page. I would expect to be able to translate the error heading and error description, but there is no mention of how to do this via the…
Issues Adding External Users in Entra
Two emails cannot be added as external users in Entra: kushibhai@outlook.com and rmhunter83@hotmail.com. What could be the reason for this issue?
How I can add an application to my Entra External ID user flow using Graph API?
Context We have built a portal where our in-house developers can register their applications. After approval, graph API's are called automatically to create the app registration/service principal. Multiple forms of authentication are supported. Use…
Seamless Migration from Azure AD B2C to Microsoft Entra External ID (Retaining Existing Consents)
Dear Microsoft Support Team, We are planning to migrate our application from Azure AD B2C to Microsoft Entra External ID. This migration is coupled with a major rebranding effort, including changes to our application’s name and URL. We currently have…
Migrating existing Azure AD B2C to Microsoft Entra External Id
Hi Team, We have an existing Azure AD B2C setup which is working fine. I believe Microsoft Entra External Id is the next generation of CIAM provided by Microsoft and I would like to move my B2C to External ID. Can I migrate my existing B2C tenant to…
Entra External ID - How to enable Microsoft Authenticator as default for MFA instead of Email OTP
Hi, I don't see any obvious way to be able to use the Microsoft Authenticator app for MFA. Security defaults does not force MFA registration. The Microsoft documentation states to use Conditional Access - so disabled Security Defaults and created an MFA…
Add external Idp with OIDC using private_key_jwk
I have setup an External identity with custom oidc. I want to use private_key_jwk, but I cannot find the place to provide my private key. As specified in the documentation: Client ID and Client Secret are the identifiers your identity provider uses to…
Unable list UserFlow ID in Graph Explorer
I am trying to disable External Tenant External Identities Signin User Flow's Create Account Field. I received AADB2C error code when i use Microsoft Graph Explorer to list User Flow ID. I had used an admin account with global admin, External ID User…
Strange / Concerning emails from Microsoft Security
I have been steadily getting emails from Microsoft Security the past few days for a microsoft account I do not regularly use much outside of email. These essentially look like security suggestions for accounts I have no idea what they are or who they…
How to embed Power BI report in Entra External ID Tenant App?
I've been able to embed a Power BI report into an Entra Web App within the same Entra ID tenant containing the account controlling the Power BI report account using the instructions provided by Tutorial: Embed Power BI content using a sample embed for…
Not able to renew token for okta sso login using MSAL in the React js application through the Azure b2c
Find the login flow in the diagram. Actually, we used the msal package in the frontend application to login. The login functionality working correctly for both B2C and Okta, but the renew token functionality is not working only for Okta. The first…
Entra External ID (External Tenant): How to send an email notification/invitation to local user created via "Create User" endpoint of Graph API
Hello everyone, We are in the process of migrating our authentication provider from Auth0 to MS Entra External ID for External Tenants (B2C). We have a couple of workflows we need to replicate in MS Entra External ID, particularly Create User and Reset…
Request for Assistance: "Need Admin Approval" Error
I am reaching out to seek assistance with an issue that we are encountering an authentication issue when users attempt to access our application, which is registered in Azure Active Directory (Azure AD) Description of the Issue: When attempting to access…
Dataiku - Snowflake Entra ID authentication: The application asked for scope that doesn't exist on the resource
I am configuring OAUTH to authorize Dataiku developers in Snowflake using external OAUTH on Entra ID. In the Dataiku documentation i have information: Fill the scope with the operations and roles permitted for the access token (This depends on your OAuth…
Why does the principal ID of my Azure Function App (system-assigned identity) change every time I update the Docker image using Terraform?
Hi everyone, I have an Azure Function App with a system-assigned managed identity that is created using a Docker image from Azure Container Registry (ACR). I have also set up a role assignment in Terraform where the principal_id of the function app is…
I am not able to login to azure portal, it's a new account
Dear Support Team, I recently signed up for Azure using my email ID and successfully completed the payment and verification process. However, I am now unable to log in to the Azure portal using the same email ID. I am encountering the following error…
Error when attempting to create an Entra External Directory and associate a App Service Web App to it
I've been trying to add Entra External authentication to a new app I'm building. I'm following https://zcusa.951200.xyz/en-us/azure/app-service/configure-authentication-provider-aad?tabs=external-configuration Steps taken Go to Web App Choose…
Query Parameter in Authorize url to be passed to custom claims provider
Using the following sample: https://zcusa.951200.xyz/en-us/entra/identity-platform/custom-extension-tokenissuancestart-configuration?tabs=azure-portal%2Cexternal-tenant I succeeded in triggering an Azure Function on the TokenIssuanceStart event to add…