Cannot enable Azure Files identity-based authentication (AzureFilesIdentityBasedAuthentication feature not found)

Question

Cannot enable Azure Files identity-based authentication (AzureFilesIdentityBasedAuthentication feature not found)

Mike DiMartino 0

I am trying to enable Azure Files identity-based authentication using Microsoft Entra Domain Services in my subscription. However, the Azure Portal does not display the option to configure identity-based access, and running the CLI command:

az feature show --namespace Microsoft.Storage --name AzureFilesIdentityBasedAuthentication --query "state"

returns: FeatureNotFound

My environment is the standard public Azure cloud (AzureCloud), East US 2 region.

Please enable this feature for my subscription so I can use Azure Files with Microsoft Entra Domain Services (Azure AD DS) authentication.

Vedprakash Rote 180 Reputation points Microsoft External Staff Moderator

2025-06-10T09:27:41.0133333+00:00
Hi Mike DiMartino,

As suggested by Manu Philip try the command and if it has any issue try to run the below command as the issues you are facing "FeatureNotFound" error because the AzureFilesIdentityBasedAuthentication feature no longer requires manual registration, it has been fully integrated into the Azure platform and is generally available in public regions like East US 2. This means that attempting to check or register the feature using:

az feature show --namespace Microsoft.Storage --name AzureFilesIdentityBasedAuthentication --query "state"

This will return FeatureNotFound by design, not because the feature is unavailable.

To enable identity-based authentication for Azure Files using Microsoft Entra Domain Services, ensure that Entra Domain Services is already deployed and properly configured in your tenant. Then, instead of checking or registering the feature, directly enable the authentication on your storage account using the Azure CLI:

az storage account update --name <storage-account-name> --resource-group <resource-group-name> --enable-files-aadds

Replace the placeholders with your actual storage account and resource group names. After running this command, go to the Azure Portal, navigate to your storage account, and under File shares > Identity-based access, you should see the configuration options.
For more information, please refer to the link below

Enable Microsoft Entra Domain Services authentication on Azure Files

Enable Microsoft Entra Domain Services authentication for your account

I hope this information helps. Please do let us know if you have any further queries.

Please do not forget to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Vedprakash Rote 180 Reputation points Microsoft External Staff Moderator

2025-06-12T05:54:58.1766667+00:00

Hi Mike DiMartino,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Thank you!

1 answer

Your answer

Vedprakash Rote 180 Reputation points Microsoft External Staff Moderator

2025-06-10T09:27:41.0133333+00:00

Hi Mike DiMartino,

As suggested by Manu Philip try the command and if it has any issue try to run the below command as the issues you are facing "FeatureNotFound" error because the AzureFilesIdentityBasedAuthentication feature no longer requires manual registration, it has been fully integrated into the Azure platform and is generally available in public regions like East US 2. This means that attempting to check or register the feature using:

az feature show --namespace Microsoft.Storage --name AzureFilesIdentityBasedAuthentication --query "state"

This will return FeatureNotFound by design, not because the feature is unavailable.

To enable identity-based authentication for Azure Files using Microsoft Entra Domain Services, ensure that Entra Domain Services is already deployed and properly configured in your tenant. Then, instead of checking or registering the feature, directly enable the authentication on your storage account using the Azure CLI:

az storage account update --name <storage-account-name> --resource-group <resource-group-name> --enable-files-aadds

Replace the placeholders with your actual storage account and resource group names. After running this command, go to the Azure Portal, navigate to your storage account, and under File shares > Identity-based access, you should see the configuration options.
For more information, please refer to the link below

Enable Microsoft Entra Domain Services authentication on Azure Files

Enable Microsoft Entra Domain Services authentication for your account

I hope this information helps. Please do let us know if you have any further queries.

Please do not forget to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Vedprakash Rote 180 Reputation points Microsoft External Staff Moderator

2025-06-12T05:54:58.1766667+00:00

Hi Mike DiMartino,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Thank you!

Answer 1

Manu Philip 20,206 MVP Volunteer Moderator

Hi Mike DiMartino

Try the below cli to enable aadds for the Azure Files share and try again

az storage account update -n <storage-account-name> -g <resource-group-name> --enable-files-aadds

Hope this helps.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Share via

Cannot enable Azure Files identity-based authentication (AzureFilesIdentityBasedAuthentication feature not found)

1 answer

Your answer