How to give external customer accounts in a entra external id tenant access to a a web api in my internal tenant?
I have an internal tenant A where I have internal resources (web api, functions, database, admin website etc). Recently I created an external tenant B with Microsoft Entra External id for customers. There I have registered a SPA app where external…
403 Forbidden - Request forbidden by administrative rules
I work in the UK. On Microsoft Azure/Microsoft Entra ID, my colleagues who are Member users have their user location set to the UK. Even for those that work for our company who live in the US, Canada and India. When 2 of my colleagues went to China they…
Can users from different tenants be given access to Business Central?
Is it possible to set up multi-tenancy for Business Central Online? I'd like to find out if and how, users from different Microsoft Entra ID tenants can be given full access to Business Central Online?
Microsoft Entra ID for Customers and OpenID Connect integration with customer Identity Provider
I am looking into the preview for Microsoft Entra ID for Customers (new CIAM solution), and want to know if it is possible to provide SSO for my customers by integrating towards their Identity Provider using OpenID Connect. Currently there seem to be an…
Why does my Azure AD B2C go into infinite loop on login (localhost)
Followed tutorial (below) to set up a .Net 8 MVC app with an Azure AD B2C signin page. Using a new tenant with user flows. When I test the user flow with reply url, jwt.ms, a token is created. However, when I attempt to test login locally…
How to use a microsoft personal email with DefaultAzureCredential from python sdk to download/upload files in azure storage blob account?
I'm developing a system in which a user from a simple python application can download/upload files from azure blob storage. I'm using python sdk and VS code as IDE (without the azure extension activated) and I'm stuck with microsoft personal account used…
Unable to Read/Write B2C Custom Domain Settings in Entra Admin Center
I'm following along the Azure Add your custom domain name steps and trying to navigate to the Settings>Domain name. I have global admin for the tenant which is also linked to an active subscription But there is no Setting under Identity.
how to fix app registration access from myapp and restrict from other users
Hi team, I have problem when create external identity & azure ad b2c, to create access management login, i have create azure ad b2c, app registration & add app launcher at enterprice application. Users can access apps from myapp when…
B2C Microsoft identity provider with msal-browser 2.x login error code challenge require
Please see my issue in MSAL Github: B2C Microsoft identity provider with msal-browser 2.x login error code challenge require I got a suggestion to ask in the community maybe someone has an answer or has the same issue, Why does B2C not forward some…
How to redirect external user sign in attempt to initial sign in page instead of error page?
Sign in with Microsoft added to our app through our Entra ID. It works only for our tenant users, which is okay. But when external accounts outside our tenant attempt to sign in, a Microsoft error page shows up with sensitive info of our tenant…
AaDApplication Proxy connector
Hi All, for Azure AD Application Proxy, under the Connector event Viewer section, I can see an event: as below: "Microsoft AAD Application Proxy Connector's inactive connection detection mechanism has identified inactive connections, number of…
How to resolve Invitation Redemption failed error in a B2B SAML Federation scenario with OKTA
I am currently testing the integration of OKTA as a SAML federated service, with Entra, for B2B guest access. This is a prelude to an urgent live deployment requirement that I have for a client. I have created an OKTA developer account, configured the…
External identity cannot accept the invitation
This user ([saadi@onminerets.onmicrosoft.com]) was invited to this tenant cfeee0c4-dbf3-44f7-b6c7-361ade5b4555 though without mailbox but was sent the invite link and when clicks the link he get this: When he clicks switch accounts, he gets this:…
How to fix error "AADB2C90046" returned back by ACS endpoint of Azure AD B2C?
Users are encountering an error after successful authentication through SiteMinder (external IdP). Following authentication, SiteMinder sends a SAML Response to Azure AD B2C's ACS endpoint, but B2C returns the below…
Azure AD B2C Front-channel logout URL Not Working
Hello everyone, I'm facing an issue with Azure AD B2C for which I'm struggling to find a solution. I have multiple registered applications, each representing a different product. When I log out of one of these applications, I'd like the sessions in the…
How to fix error "Account already exists" when signing in google users on a customer entra tenant?
Dear Microsoft support team, My name is Javier Ortega, and I am writing to seek assistance with: Authentication from .Net application to Entra tenant, with google users. Currently we have a group of users migrated to a customer (external) entra tenant.…
B2C Sign Up Issue in Azure API Management Developer Portal
Hello, I'm encountering an issue with my API Management developer portal. Currently, the portal only permits sign-ins and sign-ups via B2C. Previously, I successfully tested the sign-up and sign-in system. However, after updating the gateways for both…
In Entra External ID CIAM, will it be possible to add any external identity provider without a verified domain or DNS change?
We have various customers that have IdPs with their own companies and would like to use their identities to log in to our customer-facing applications. In Entra External ID CIAM, will it be possible to add any external identity provider without a…
How can I assign Visitor access for external users to a SharePoint communication site?
The SharePoint site access does not allow me to add a visitor's email address. These external users have NOT been entered as Microsoft Entra guests. This SharePoint communication site will store training videos. So visitors will NOT be allowed to edit…
Endless login loop - locked out from tenants
We are currently locked out from some of the CIAM tenant(s) we manage. This issue seems to surface with every tenant we created during this week after some time passes. When we try to login, the following prompt is shown: Then, after clicking next,…