Azure External Identities : B2B Cross Tenant federation - Users are received in Target Tenant as ID's only - no names, no UID in AAD

Question

Azure External Identities : B2B Cross Tenant federation - Users are received in Target Tenant as ID's only - no names, no UID in AAD

Joel Scott 1

Azure "External Identities" -
We setup up cross-tenant organziation with another source tenant. You MUST use either a group or uid - we used a group.
The organization sync'd but the 'users' are in ID format, not username. No entry in AAD users. I waited 24 hours - still nothings. The UID is not very helpful as you can't do anything just because you have this ID.
Is there an undocumented setting or approach to make these users - AD connected from Tenant A to Tenant B properly show up?

James Hamil 27,211 Reputation points Microsoft Employee Moderator

2022-03-14T17:41:55.88+00:00

Hi @Joel Scott , I'm sorry you're having this issue! It's been 2 days, has anything changed? If not, is this happening for all users? Are they all from the same tenant? Do you own this other tenant? Are any of the users external?

1 answer

Your answer

James Hamil 27,211 Reputation points Microsoft Employee Moderator

2022-03-14T17:41:55.88+00:00

Hi @Joel Scott , I'm sorry you're having this issue! It's been 2 days, has anything changed? If not, is this happening for all users? Are they all from the same tenant? Do you own this other tenant? Are any of the users external?

Answer 1

James Hamil 27,211 Microsoft Employee Moderator

Hi @Joel Scott , please let me know if you're still having this issue. With the information provided I suggest following this document about external identities. You may have something here configured wrong, or are not adding these users properly. Please let me know if you have any questions.

Best,
James

Joel Schottenfeld 1 Reputation point

2022-04-04T15:29:37.023+00:00

Hi James, not very helpful unfortunately - As we did follow the documentation as I noted in the original request ( why I asked if there was something undocumented )
As you can see the transient trusted tenant . The main tenant we are trying to ALLOW the user from the secondary tenant shows up as the ID - not the user name. This is problematic because we can't see who the user is. Also when applying THAT user ID object to the application - the user from the secondary tenant doesn't see the application in myapps or any other available access.
defc6391-4a8f-4869-a60b-9b83db51229b
user

Share via

Azure External Identities : B2B Cross Tenant federation - Users are received in Target Tenant as ID's only - no names, no UID in AAD

1 answer

Your answer