How to use custom domain instead of primary domain for student users but not staff?

Question

Is it possible to use a verified custom domain as the domain name used in all Student UserNames for logging into Office365 and using the SSPR? I see that I can manually change the domain used within User Properties. Basically I would like Staff usernames to end with the primary domain and Student usernames to end with a custom domain we've added to Azure AD. I also enabled Email as alternate login but that didn't seem to help even though the email in on-prem Active Directory shows the domain I want to use.

Answer 1

yep, as long as the domain is verified in Azure, you can use it as the domain suffix for the User Logon. All you need to do is set that when creating the accounts.

As far as SSPR, you can scope to a specific group, so create an Azure group of those students (dynamic?) and set SSPR to that:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#enable-self-service-password-reset

https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership