25,252 questions
Verify organization email extension
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 26%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHK%3C/text%3E%3C/svg%3E)
Harsh Kanakhara
1
Reputation point
I have a list of users in my application registered with their organization email accounts. I want to verify if the user email-id mail extension is valid and registered inside MS 365. If email-id is valid then I want to enable SSO using SAML.
Example: If the user email-id is "******@company-domain.com" then I want to check that "@company-domain.com" is registered in MS 365.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
13,742 questions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator2022-12-13T07:43:45.46+00:00 @Harsh Kanakhara Thank you for reaching out to us. As I understand you want to verify if the user email-id mail extension is valid and registered inside Azure AD. If email-id is valid then you want to enable SSO using SAML.
Just wanted to check if you have explored this feature within Azure AD Cross-tenant access with Azure AD External Identities
if my understanding of the issue or above information doesnt help to achieve your ask, let me know we can connect offline and discuss further on this issue.
-
Harsh Kanakhara 1 Reputation point
2022-12-13T10:23:58.987+00:00 Thanks for the quick reply
FYI I don't have access to AD for any of the domains. We are currently having a password-based workflow for all MS 365 corporate accounts. If I found the corporate domain is valid then going to create a guest user in Azure AD tenant created for our application.
I have a list of emails. I parsed emails and extracted unique domains from them. I tried to use autodiscover API to find if domain is valid and registered in MS 365 but got the following error
Unauthenticated request GET http://autodiscover.<my_company_domain>.com/autodiscover/autodiscover.xml giving 401
Unauthenticated request GET http://<my_company_domain>.com/autodiscover/autodiscover.xml giving 403
Unauthenticated request GET http://autodiscover.<my_company_domain>.com/autodiscover/autodiscover.json giving 400
Response:
{
"ErrorCode": "MissingProtocol",
"ErrorMessage": "A valid value must be provided for the query parameter 'Protocol'."
}
What should be the value of Protocol param?
Sign in to comment
Sign in to answer