Need help in changing the Identities for a user existing in Azue AD

FNU Tanushree (INFOSYS LIMITED) 1 Reputation point Microsoft Vendor

Identities for a User should be 'ExternalAzureAD'

But its showing 'Microsoft Account'

User is not able to access the Portal and getting error that his account is not existing in Microsoft Tenant.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,389 questions
{count} votes

2 answers

Sort by: Most helpful
  1. JamesTran-MSFT 36,361 Reputation points Microsoft Employee

    @FNU Tanushree (INFOSYS LIMITED)
    Thank you for your post!

    When it comes to changing the User Type from Microsoft Account to External Azure AD, this isn't possible. After the user was initially invited to your Azure AD tenant via B2B, if they logged in with an account from another Azure AD organization/tenant (i.e., the Issuer would reflect External Azure AD. However, since they signed in with an account from an external identity provider (i.e. Facebook, Google, Outlook, Yahoo, etc.) the Issuer is reflecting Microsoft Account.

    Note: A user can have several identity providers, which can be viewed by selecting issuer in the user’s profile

    From your post, since the user is having issues logging into the Portal - if you have other users/access to confirm, I'd make sure that they're still a user in the tenant and in the correct Directory. Switch and manage directories.

    Additional Links:
    Key properties of the Azure AD B2B collaboration user
    Convert UserType
    After invitation redemption

    I hope this helps!

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.


    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

  2. Tyler Hansen 0 Reputation points

    Hi, How can you update an Azure AD user with an identities issuer as mail to ExternalAzureAD? Current method of signing in requires an account verification code each time. Need to make method of signing in more instantaneous.
    User's image

    0 comments No comments