Azure Active Directory Graph API Access

Question

Azure Active Directory Graph API Access

Arunkumar Duraisamy 0

Hi, I have an app registered as a single tenant. I have to implement SSO in an app, so there are new users coming into our app, for that, I'm using graph API to create a new user in AAD, the credentials used for creating a new user are Microsoft Personal Account Credentials, so I'm getting an error like below,

        "code": "Authorization_IdentityNotFound",       
	     "message": "The identity of the calling application could not be established.",

Should we only want to use Business account?

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-06-26T11:20:38.2+00:00

Hi @Arunkumar Duraisamy ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-06-26T11:20:38.2+00:00

Hi @Arunkumar Duraisamy ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

CarlZhao-MSFT 46,371

Hi @Arunkumar Duraisamy

You cannot create a personal account in a tenant, you can only invite a personal account to the tenant as a guest.

You can invite directly in the Azure portal or through the graph API.

Through the Azure portal:

User's image

Through the graph API:

POST https://graph.microsoft.com/v1.0/invitations
Content-type: application/json

{
  "invitedUserEmailAddress": "******@fabrikam.com",
  "inviteRedirectUrl": "https://myapp.contoso.com"
}

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

CarlZhao-MSFT 46,371 Reputation points

2023-06-21T05:27:33.6266667+00:00

Hi @Arunkumar Duraisamy

Hope things are going well. I am writing to see if the above suggestions help. If there's anything else we can help, feel free to let us know.
Arunkumar Duraisamy 0 Reputation points

2023-06-21T17:24:03.1333333+00:00

Can we use the enterprise account to create new user of email with any domain using graph API?
CarlZhao-MSFT 46,371 Reputation points

2023-06-23T08:43:00.7733333+00:00

Hi @Arunkumar Duraisamy

This can only be achieved in an Azure AD B2C tenant: https://learn.microsoft.com/en-us/graph/api/user-post-users?view=graph-rest-1.0&tabs=http#example-2-create-a-user-with-social-and-local-account-identities.

For Azure AD tenants, creating new users from other domains is not supported, and you can only invite users from other domains to join the tenant as guests.
CarlZhao-MSFT 46,371 Reputation points

2023-06-26T07:54:24.07+00:00

Hi @Arunkumar Duraisamy

I am checking to see if this issue is resolved or not. If you have any concerns, please feel free to reply.
CarlZhao-MSFT 46,371 Reputation points

2023-07-03T01:58:55.2533333+00:00

Hi @Arunkumar Duraisamy

If the reply is helpful, please don't forget to accept it as an answer. This might help members of the community with similar issues, thanks!
Arunkumar Duraisamy 0 Reputation points

2023-07-04T06:55:04.9566667+00:00

Hi, I am not able to add new domains like gmail.com etc., while verifying it says please check DNS registrar.
Arunkumar Duraisamy 0 Reputation points

2023-07-04T09:33:23.08+00:00

CarlZhao-MSFT Hi, then how can we set password for guest users.

Share via

Azure Active Directory Graph API Access

1 answer

Your answer