19,887 questions with Microsoft Entra ID tags

Sort by: Updated
Updated Created Answers
5 answers

Getting AADSTS501204 Malformed jwt error while logging into Microsoft apps. how to resolve this?

I have changed password for my company account. since then I am facing malformed jwt error when I try to login into Microsoft apps. I am able to login to microsoft apps through browser with new password but unable to login through installed apps. It is…

Word
Word
A family of Microsoft word processing software products for creating web, email, and print documents.
697 questions
Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,261 questions
Outlook
Outlook
A family of Microsoft email and calendar products.
3,127 questions
PowerPoint
PowerPoint
A family of Microsoft presentation graphics products that offer tools for creating presentations and adding graphic effects like multimedia objects and special effects with text.
232 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-22T08:38:27.8133333+00:00
Durga Bhavani Chadala 45 Reputation points
commented 2024-05-28T16:13:12.6833333+00:00
Durga Bhavani Chadala 45 Reputation points
0 answers

We encountered an 'invalid_grant' error connecting to the identity provider. Please try again later

Category : Azure AD B2C We have added federated login(Sign in with Google) to our application. Google IDP is working well for users having @gmail domain users but non gmail users , some of the users we are getting below error. "We encountered an…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,001 questions
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,681 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T08:59:35.2033333+00:00
Venkat Maram 0 Reputation points
edited the question 2024-05-28T16:03:25.0666667+00:00
Venkat Maram 0 Reputation points
1 answer

Microsoft Entra Id - Sign In Log API

Hello Team, We could see there are four types of Sign-in logs as per https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-sign-ins?source=recommendations#what-are-the-types-of-sign-in-logs. Is Sign-in API return all these type…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T08:07:19.84+00:00
Ron Weasley 0 Reputation points
answered 2024-05-28T15:44:13.6633333+00:00
Vasil Michev 97,231 Reputation points MVP
1 answer

Restrict Microsoft Graph API permission

Hello, one of the applications in the tenant needs permissions to the Graph API AppRoleAssignment.ReadWrite.All with the Application type in order to automatically manage AppRoles assignment in the application. However, these permissions pose a high…

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T10:52:54.89+00:00
Fraczek, Rafal SW/WRO-DCDZA 121 Reputation points
answered 2024-05-28T15:40:26.2133333+00:00
Vasil Michev 97,231 Reputation points MVP
1 answer

Microsoft 365 Defender - How to get more meaningful email alerting?

How can I get more meaningful email alerts using the Microsoft 365 Defender? Because every time I get the email alert, the email is not as informative like the below: Microsoft 365 Defender has detected a security threat in your environment View incident…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,870 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,216 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,172 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
162 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-27T13:00:44.4566667+00:00
EnterpriseArchitect 4,891 Reputation points
answered 2024-05-28T15:31:10.0266667+00:00
Rich Matheisen 45,186 Reputation points
0 answers

Why has my long running 90 day inactive Guest Access Review suddenly start using non-interactive sign-in instead of interactive sign in timestamps?

Hello, I have been running the above mentioned access review for probably 2 years without major issues. Recently it seems that the reviews have switched to looking at non-interactive sign-ins as well as interactive sign ins. There is really two issues…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-23T22:55:32.94+00:00
Randy Nameth 0 Reputation points
commented 2024-05-28T15:25:04.54+00:00
Navya 4,780 Reputation points Microsoft Vendor
1 answer

Can I put the value of instanceDurationInDays in minutes for the QA while creating access reviews using powershell?

I am able to create an azure access reviews with Graph API 1.0 using PowerShell. Now, there is a property called instanceDurationInDays which should have an integer value. The access review will remain active for the number of days of the value of…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,870 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,414 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,172 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-27T13:42:49.5833333+00:00
Sumit Bhargav 0 Reputation points
answered 2024-05-28T15:12:45.8133333+00:00
Rich Matheisen 45,186 Reputation points
2 answers One of the answers was accepted by the question author.

Using Azure AD as an identity provider in Keycloak-based applications: how can I add missing user data to my client applications?

Hello, I'm currently using Azure AD as my identity provider and Keycloak as my intermediary/broker for my client applications. However, I need some user attributes (such as phone, email, picture, and officeLocation) that aren't provisioned from Azure to…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2023-03-14T09:42:45.8466667+00:00
Meier Linus 20 Reputation points
commented 2024-05-28T15:06:51.34+00:00
Bony 0 Reputation points
1 answer

AAD Sync errors 8344 on export for a small number of accounts

Good morning hive mind! I am struggling to find what is causing error 8344 on just 8 accounts on Export sync with AAD, getting error 8344 "Insufficient access rights to perform the operation" we have enabled inheritance on the MSOL account,…

Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,922 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-21T09:42:43.29+00:00
Spencer Guest 21 Reputation points
commented 2024-05-28T15:06:31.1166667+00:00
Michael Smith-MSFT 2,831 Reputation points Microsoft Employee
0 answers

Cannot register for Hardware Developer Program

I am trying to register for the Hardware Developer Program. I am logged into an account that is marked as Global Administrator when I check in Microsoft Entra admin centre ("Your Role: Global Administrator"). However I cannot progress through…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T14:33:50.4333333+00:00
Lumi Dev 0 Reputation points
1 answer

Connect-MgGraph : Invalid JWT access token. Connect-AzAccount : InteractiveBrowserCredential authentication failed

I need help and a solution to rectify the below error when executing the PowerShell Connect-* command. $TenantID = '22bb9241-65c8-45b4-94f9-7c151e154693' $AzSubscriptionID = 'd487514e-4317-447f-af79-5022d310f6bd' $paramConnectMgGraph = @{ Scopes =…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,870 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,414 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,172 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T07:17:43.8466667+00:00
EnterpriseArchitect 4,891 Reputation points
commented 2024-05-28T13:54:15.38+00:00
Hitesh Pachipulusu - MSFT 320 Reputation points Microsoft Vendor
0 answers

How to clear the account list in the Web Account Manager list of Accounts displayed by WAM Broker

I have a WPF desktop app that accesses an Azure WebAPI. It uses the MSAL library and when authenticating uses the WAM broker. When the list of accounts is displayed, there is an account of someone that used the computer once when I was logged on to the…

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
628 questions
Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,400 questions
.NET
.NET
Microsoft Technologies based on the .NET software framework.
3,466 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-25T18:43:22.4933333+00:00
Michael 76 Reputation points
commented 2024-05-28T13:45:44.2066667+00:00
Michael 76 Reputation points
14 answers

Authenticator App - can't remove greyed out account

Hello all, I'm stuck in a strange loop using the MS Authenticator App. I'm one of the admins at my school and I've registered my phone via https://account.activedirectory.windowsazure.com/securityInfo using the MS Authenticator App. I wanted to…

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,675 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2021-01-27T10:27:40.33+00:00
Ris Janssen 126 Reputation points
commented 2024-05-28T13:32:32.28+00:00
Phil Cross 0 Reputation points
1 answer

For Access Review in Entra ID, is there a way to configure email notification that the reviewer only gets one (1) email notifications for all the reviews pending instead of getting emails for all the users he/she has to review?

I want to configure email notification for Access Review so that reviewers will not be inundated with email notifications and might also miss some reviews because of the torrents of emails.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-27T13:04:27.4266667+00:00
Olumide Olajide 0 Reputation points
answered 2024-05-28T13:31:19.7733333+00:00
Akhilesh 5,560 Reputation points Microsoft Vendor
2 answers

Cannot see linked subscription under new tenant

Hello everyone, From my main default directory, I created a new B2C tenant, and it was created successfully. My user account has global administrator rights under this new tenant. The new tenant is linked to my Pay-as-you-Go subscription, as shown in the…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-27T08:28:13.4966667+00:00
Naeem Raza 0 Reputation points
edited an answer 2024-05-28T13:11:44.41+00:00
Navya 4,780 Reputation points Microsoft Vendor
1 answer

Microsoft Entra Id - Provisioning Log API

Hello Team, Provisioning logs contain only user provisioning or it also contains any other provisioning like group, resource etc. I could see only user provisioning logs even though, we had created group provisioning. Group provisioning logs come…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T08:42:33.1366667+00:00
Ron Weasley 0 Reputation points
commented 2024-05-28T13:11:42.6133333+00:00
Ron Weasley 0 Reputation points
1 answer

Global Secure Access bypass (Internet and web filtering)

Hi, I understand in Global Secure Access "365" I can use a Conditional Access Policy to block access to 365 if not from "All Compliant Network locations" to prevent a user from pausing the Client. But If I want to use Global Secure…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-23T18:41:44.2933333+00:00
Nathan Pinotti 0 Reputation points
commented 2024-05-28T12:56:49.54+00:00
Nathan Pinotti 0 Reputation points
1 answer

How do I activate a free Entra ID P2 on my trial subscription

I am trying to go through the instructions here: https://learn.microsoft.com/en-us/training/modules/allow-users-reset-their-password/4-exercise-set-up-self-service-password-reset Go to Microsoft Entra ID > Password reset. Select Get a free Premium…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-04-25T18:39:51.95+00:00
Phillip Putzback 20 Reputation points
edited the question 2024-05-28T12:31:33.96+00:00
AmaranS 2,690 Reputation points Microsoft Vendor
0 answers

How to allow users to register for MFA from home without excluding them from location based conditional access policies

We have a requirement where in small number of cases users (new starters or MFA issues) need to register for MFA from a remote location. We have a conditional access policy which restricts access to Azure cloud apps from outside corporate office. We…

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T12:20:27.75+00:00
curious7 151 Reputation points
1 answer

Problem with "exclude" user/target resource in conditional access policy

Hi, I have been trying to restrict 1 user to access only 1 app on Azure Entra ID, so I use the condition access policy under security tab. I have put the conditions as follows: user: userx@microsoft.com Target Resources: Include All cloud apps &…

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
807 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,887 questions
asked 2024-05-28T10:28:15.6466667+00:00
Atima Thong 0 Reputation points
answered 2024-05-28T12:10:30.2+00:00
Michael Cameron 257 Reputation points