Unable to login to SMB share using User Principal Name in AAD DS environment

Michail 26 Reputation points
2024-02-23T17:54:41.57+00:00

I have set up an AAD DS environment to allow my users to login to our Azure File Shares over SMB. However, when attempting to login with their User Principal Name in the format of "@domain.com", the system is telling them their password is incorrect while the format "@ds.domain.org" does work. The AAD DS domain is set to "ds.domain.org" as "domain.com" is occupied by our website. Am I missing something in my setup?

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
Microsoft Security | Microsoft Entra | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Cloudoire Academy 23,595 Reputation points Volunteer Moderator
    2024-02-23T19:07:12.4233333+00:00

    Thanks for posting your question in the Microsoft Q&A forum.

    Since the AAD DS domain is "ds.domain.org," users should use the UPN format "@ds.domain.org" to log in successfully. Using "@domain.com" won't work because it doesn't match the AAD DS domain.

    You can consider setting up a custom domain in Azure AD that matches your AAD DS domain ("ds.domain.org") to allow users to log in with the format they are familiar with ("******@domain.com").

    ** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful **


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.