Internal Guests Accounts cause many problems in Teams and Sharepoint
Hello Community, On the Microsoft documentation website, Microsoft describes four possible combinations of authentication (internal vs. external) and UserType (Member vs. Guest). For my use case, the best matching combination seems to be "Internal…
Enforce MFA for specific users
Hi, we're using MS Entra and we would like enable users to opt in for MFA (SMS verification) and to enforce MFA for Admins. Is there a way to do it without creating custom policies? We were thinking about creating two custom groups with one of them…
How to Display Custom Error Messages for Contact Number Validation in Azure Entra External ID Custom Authentication Extension
I’ve integrated a custom authentication extension in Azure Entra External ID to validate Irish contact numbers during the signup process. This validation works as expected—if the contact number doesn’t match the specified Irish format, the signup process…
Azure Ad B2C User journey block message get excuted to next step when refresh the page
Hi, I have got a scenario where we have got SelfAsserted block message and privacy pages. When a user gets a block message with no continue or cancel button and when we go and refresh the web page it gets executed to the next step in the user journey.…
migrate users from legacy SQL DB to azure B2C
Hi everyone, I would like to migrate users from in-house legacy idp to azure ad b2c. The legacy idp is a web app that has an SQL DB which contains users and hashed passwords. I've concluded in the documentation that I would use the Seamless Migration…
Configuring Resend Delay and Limit for Verification Codes in Microsoft Entra External ID.
In Microsoft Entra External ID, the "Resend Code" button for signup and 2FA becomes available only after a 90-seconds delay. If users don’t receive the code immediately, waiting a full minute can lead to frustration, especially when multiple…
Azure AD B2C does not respect redirect_uri
Azure AD B2C does not always respect the redirect_uri specified in the authentication request using the authorization code flow. Create app reg in B2C Add https://random1.com/signin-oidc as redirect uri Verify it works from your app Add…
Microsoft Entra Custom CSS not applied to Update Password Screen
The custom CSS classes (.ext-{name}) are not been used in the Update Password screen preventing consistency between pages. Instances like .ext-boilerplate-text and many others are been used as regular .boilerplate-text preventing us from overriding the…
Azure AD Guest invite link not working correctly
We're trying to invite a user as a guest to our tenant. We have done this successfully for other tenants, including during investigating this particular issue, and it generally does work everywhere else. Instead of getting the redemption dialog that…
Azure AD B2C Supported Countries for SMS
Hello, I had a question pertaining to Azure AD B2C regarding SMS that I couldn't find in the docs. What countries do Azure AD B2C support for SMS? Thank you.
AADSTS1100001 Error when Implementing Custom Extension for OnAttributeCollectionSubmit Event in Microsoft Entra ID
I'm implementing a custom authentication extension in Microsoft Entra ID to modify the sign-up experience in my customer self-service sign-up user flow. I’ve registered my custom extension to trigger on the OnAttributeCollectionSubmit event, which occurs…
OpenID Connect Custom Provider with Microsoft Entra External ID
Is it possible to create a OpenID Connect provider in Entra External Id? The console suggests it is, but the option is not available: Add a new custom external identity provider supporting OpenID Connect, SAML or WSFed. Learn more But the only options…
How to remove the Specific Characters from User attribute value via AAD connect Mapping under Synch rule editor
Hi All, Hope all are doing great!! We have attribute named (On-prem AD) Division whose value is "contigent employee/Technician" and we are looking to Map the (On-prem AD) division Value with Entra ID attribute Employee Org Data but we are…
Impersonating a user from Azure AD B2C
Is there a way to have like a super admin account that can impersonate or access a secured website/web api on behalf of another user? Let's say I will login and get a valid token from Azure AD using an admin account, but that token contains info and…
Azure AD B2C Self-Service Password Reset Fails on First Logon Attempt
I have a standard flow where users can register an account on a Power Pages application. After registration, they receive an email with a step-by-step guide on activation. This requires them to go to a login page created with Azure AD B2C. They need to…
Filter email alerts to only receive failed provisioning logs for a specific Azure AD Enterprise Application
I'm trying to set up email alerts in Azure so that I only receive notifications for failed provisioning jobs related to a specific Azure AD Enterprise Application. Currently, I'm receiving additional alerts for provisioning jobs of other applications,…
Securing break glass account for access from multiple geographical locations?
Based on this news announcement…
Entra ID register new users at signin
Hi, I have created an App registration for Entra External ID, Although I cant find how to enable new users without an existing account to sign up/register? Ans can be seen in the images below, there is no option to create a new user, this is setup to…
Entra External ID for Customers SCIM support
Does Entra External ID for Customers support SCIM into the Entra External Id directory? I.e. if an account has been created in the EEID4C tenant via API, can a user flow detect this and prompt the user to specify a password at the first sign-in? If this…
How to get a custom claim inside the access token
Inside the docs there is a detailed explanation on how to add a claim from an external system…