Get ObjectId for a Domain group in SharePoint Online or use another attribute...
Hi,When I get a Domain group in SharePoint Online, I got something like this:<User ID="10" Sid="" Name="Research and Development"...
View ArticlePCI DSS Compliance - Requirements 5 & 6
We are currently applying for PCI Compliance, and are required to answer the following questions. Since our solution is hosted on Windows Azure, are these questions relevant? Can anyone please suggest...
View Articlewhy can a user in a ad with organizational role "User" change the password of...
Hello,I wrote myself a little user management tool using the GraphApi (Microsoft.Azure.ActiveDirectory.GraphClient). If I let the tool sign in with a user that only has the role user assigned:it cannot...
View ArticleIs the version 2.14 of Microsoft.IdentityModel.Clients.ActiveDirectory...
Hello,I intend to use Microsoft.IdentityModel.Clients.ActiveDirectory to authenticate a native application against a WebAPI using azure active directory. However, my native application is build on...
View ArticleCloud App Discovery - Agent causing CPU spike
I'm excited to deploy the Cloud App Discovery agent more broadly in our organization. However, when pushing the agent to about 40 test workstations, we discovered that it caused a serious problem...
View ArticleSSO Problem with User sourced from another Domain
I have installed an application (Kentico 8.1) to use with SSO, using Azure Active Directory. The claims based authentication is working fine when the user is a member of the AD I created in Azure for...
View ArticlePCI DSS 8.5.13 and 8.5.14
In the PCI compliance check list, there are the following lines - 8.5.13 Limit repeated access attempts by locking out the user ID after not more than six attempts-AND-8.5.14 Set the lockout duration...
View ArticleAzure AD Graph API - Get client secret from registered apps
I've programmatically registered a web application in WAAD through POST HTTP Request. The HTTP response returns the client Id however am unable to get the client secret. Is there a way from Graph API...
View ArticleAADSTS50011: The reply address does not match the reply addresses configured...
Can anyone tell me where to update the reply address?I have AD synced from on-prem to Azure, then I setup a website on azurewebsites.net, then created a CNAME record from portal.mydomain.com to...
View ArticleTutorial: Azure Active Directory integration with CloudBees
Click reply and tell us what you think: Tutorial: Azure Active Directory integration with CloudBeesMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation
View Articlesingle sign on with PHP and azure active directory
Hi, In your documentation,Web Single Sign-On with PHP and Azure Active Directory under Step3 point number 6 you have given that we have to include simpleSAML.php file and federation folder.I...
View ArticleAzure AD Sync of passwords only works if you change the on premise AD...
Azure AD Sync of passwords only works if you change the on premise AD password first. Users sync all the time, but their passwords do not until I change them. As if it is only syncing a recent...
View ArticleError during SP-initiated SAML authentication flow
I am running into an error (details below) when I get routed to https://login.windows.net/.../saml2 page from my SaaS application (PagerDuty, in this case).Additional technical information: Correlation...
View Articlewhen appropriate to NOT have a resourceID parameter in AADSTS token request?
the Azure API Manager web app (a web service proxy) has a developer console - that makes oauth2 calls to AAD just fine. Up pops a browser windows that concludes authorization, and the web app attempt...
View ArticleError Authentication User at AZUREWEBSITES AcquireToken ADAL version 2.14
I am able to authenticate a user when working locally, using the line AuthenticationResult result = context.AcquireToken(_resource,clientID, returnURI, PromptBehavior.Always);Locally, I get...
View ArticleCan i view the custom properties created in Window Azure via signing in or...
Hi,I have a free window azure license and i am using Azure AD for authentication.Now i want a custom property say "XYZ" in azure AD, My Questions are :1. Can i create The Custom properties OOTB ?2. How...
View ArticleIssue with account
When I try to connect to Azure, I get the following message."It looks like myemailaddress is used with more than one account. Which account do you want to use?Since this is a work account, I choose...
View ArticleQuestion about AuthenticationContext.AquireToken arguments.
I'm attempting to access an AAD secured web API with a Windows native client (console app) also registered with the AAD. To get the needed access token I use an AuthenticationContext and call it's...
View ArticleGraph API - Rate Limiting/ Throttling
Hello,In response to a previous question (https://social.msdn.microsoft.com/Forums/azure/en-US/b5edf167-09a0-4ed9-9bef-8d4fb93effb7/q-rate-limiting-on-graphapi?forum=WindowsAzureAD), it was mentioned...
View ArticleDirectory Synchronization Error
Hi everyone!I am currently trying to sync my on-premise Active Directory (hosted on Windows Server 2012 R2) with Azure's AD using the AD sync tool. However, I cannot get past the "Windows Azure Active...
View Article