On Premise AD Sync

Question

We just setup Azure to sync with our On-Premise AD. Is there a way to have our user accounts be able to sign in using just their email address? For example our full username is "user@lcgov.lincolncounty.org" but it would be a lot easier just using "user@lincolncounty.org" both domains are setup and verified in Azure.

Answer 1

@Justin Rubow Thanks for reaching out.
Your scenario can be achieved by using something called Alternate login ID. Read more about it here. This contain detailed information about configuration and usage.

Here's what you need to know about email as an alternate login ID:

The feature is available in Azure AD Free edition and higher.
The feature enables sign-in with verified domain ProxyAddresses for cloud-authenticated Azure AD users.
When a user signs in with a non-UPN email, the unique_name and preferred_username claims (if present) in the ID token will have the value of the non-UPN email.
There are two options for configuring the feature:
1)Home Realm Discovery (HRD) policy - Use this option to enable the feature for the entire tenant. Global administrator privileges required.
2)Staged rollout policy - Use this option to test the feature with specific Azure AD groups. Global administrator privileges required.

-----------------------------------------------------------------------------------------------------------------

If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.