3,386 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Sort by: Updated
1 answer

Locked out of Azure and can't set up MFA due to conflict betwen personal MS account and Azure accounts.

I'm locked out of m Azure tenant due to a conflict between my personal Microsoft account and the Azure work account using the same email address. The system defaults to my personal account and I can't access the Azure envirornment or reset MFA. I am…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-08T00:13:06.92+00:00
Darcy Zulpo 0 Reputation points
commented 2025-08-12T17:23:00.0366667+00:00
Raja Pothuraju 29,560 Reputation points Microsoft External Staff Moderator
0 answers

Access Tokens from Entra External IDare incorrectly issued from v1 endpoint (sts.windows.net)

I followed along with this tutorial, and created a new App Registration in my new Azure Entra External tenant. I can verify that in the app registration manifest that the v2 endpoint is specified by the "requestedAccessTokenVersion": 2. The…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-12T14:47:29.4466667+00:00
JasonT 0 Reputation points
edited the question 2025-08-12T17:21:18.8633333+00:00
JasonT 0 Reputation points
0 answers

Azure Entra External ID (CIAM) : Custom IdP

Hello ! in our CIAM tenant we have an external custom IdentityProvider using SAML 2.0 protocol, I've created a Sign-in flow to use this external-IdP anticipating the user creation happens upon successfully authenticated by the external-Idp. Problem…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-12T15:49:24.9133333+00:00
Krishna Gundam 0 Reputation points
1 answer

Redirect URI accepted by Azure Entra despite not being registered — help needed

Hi all, I have an Azure Entra app registration with ClientId 18a32140-5066-4c0f-8ef7-d5bbbb019c9e. Our app runs locally at https://localhost:7196 with a callback path /signin-oidc, so the redirect URI is https://localhost:7196/signin-oidc. When…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-12T15:03:20.9866667+00:00
Ahmed Samak 0 Reputation points
commented 2025-08-12T15:20:26.68+00:00
Ahmed Samak 0 Reputation points
0 answers

Blazor Server App with Entra ID - Role Claims Not Available in User Principal

My Blazor Server app uses the Microsoft.Identity.Web framework with Entra ID (Azure AD) as the authentication provider. Authentication works correctly, but user role claims are not present in the authenticated user principal. As a result, any…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-08T06:53:16.16+00:00
Ben Wilson 25 Reputation points
commented 2025-08-12T15:17:10.1466667+00:00
Ben Wilson 25 Reputation points
1 answer

Markdown hyperlinks not rendering in Entra External ID User Flow labels anymore

We are trying to add a hyperlink to the label of a custom boolean attribute on our Entra External ID sign-up page (User Flow), as described in the official Microsoft Entra documentation. Link to…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-03T14:46:49.9233333+00:00
Luca Giorgi 0 Reputation points
commented 2025-08-12T13:11:26.5966667+00:00
Praveen Chivarla 5 Reputation points Microsoft External Staff Moderator
0 answers

Catch 22 for blocked tenant: Error code: AADSTS5000225

Hello, I got the email stating my account would be deleted by 17th of August. I've just logged in and added Pay-as-you-go, but now i still just get the "This tenant has been blocked due to inactivity" message and i cannot enter azure at all. I…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-04T06:56:38.11+00:00
Augustbt 0 Reputation points
commented 2025-08-12T12:45:28.8566667+00:00
Monalisha Jena 0 Reputation points Microsoft External Staff Moderator
3 answers

Entra External ID - Unable to enable native authentication

I'm unable to enable native authentication for my application under App registrations > Authentication > Settings > Enable native authentication. It says saved successfully but when I refresh the page it is still off and my application is…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-01T01:55:48.1966667+00:00
Aaron Zhong 10 Reputation points
commented 2025-08-12T12:42:02.1633333+00:00
Monalisha Jena 0 Reputation points Microsoft External Staff Moderator
0 answers

How can I set up B2B collaboration with cross-tenant synchronization for users (authentication) and groups (authorization) between two Entra ID tenants?

In my current setup, I have two tenants: one for employees and another for external users. Using AD Connect, I am syncing users and groups from two on-premises Active Directories — one for employees and another for outsourced users. After syncing with AD…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-11T11:46:58.7166667+00:00
Vishwajeet Kamble 0 Reputation points
2 answers

2 Factor Authentication Issues

This is not my skill set so I am going to do my best to explain this without resorting to the use of "thingy". I can't setup my email address in the MS authenticator app because it is currently connected to an old phone (at least that is my…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-07-26T13:32:10.8966667+00:00
Daniel Banker 0 Reputation points
commented 2025-08-11T06:00:05.49+00:00
Saritha Bandaru 335 Reputation points Microsoft External Staff Moderator
2 answers

I cant leave another organization

Hello Please i need your help on this issue. I have an account that is attached to "another organization" but is not being allowed to leave. When I try to leave for him, I also get an error.  

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Other
asked 2024-11-22T09:41:06.18+00:00
IniobongNkanga-8038 971 Reputation points
commented 2025-08-10T12:50:13.09+00:00
CrazyKats 7,360 Reputation points Volunteer Moderator
2 answers

'AADSTS500207: The account type can't be used for the resource you're trying to access' error when trying to access custom scope in an External Tenant

Hello, I am having issues when trying to sign into my External tenant and specifying a custom scope. The error happens when I am making use of the MSAL library but also when attempting to authenticate with Postman or Insomnia. I have set my authority to…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2024-07-03T14:32:57.8966667+00:00
Sam Anson 25 Reputation points
commented 2025-08-10T00:23:11.2833333+00:00
Tlotlo Sebeela 0 Reputation points
4 answers

Azure AD B2C sms customization

We are using phone number based authentication using Azure AD B2C custom policies. In that we are looking for a way to customize the content of the sms that is sent for verification code. But we did not find any documentation for doing that. Can…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2019-12-06T07:18:09.437+00:00
Srinivas Sripathi 41 Reputation points
answered 2025-08-09T13:26:38.8666667+00:00
Vishwagnya, Anumandla 0 Reputation points
2 answers One of the answers was accepted by the question author.

help me to login to microsoft account

Hello microsoft, I can't access my admin account. I'm the only one with access and there are no other admin accounts, only one account in this photo. my authenticator phone has been reset and not backed up. I don't have the verification code saved. I…

Windows for business | Windows 365 Business
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2024-10-18T22:05:21.4466667+00:00
Nuha Abdul Mukaffi 40 Reputation points
edited a comment 2025-08-08T21:08:29.8566667+00:00
Glynn, Tarance@EDD 0 Reputation points
1 answer One of the answers was accepted by the question author.

How to get a custom claim inside the access token

Inside the docs there is a detailed explanation on how to add a claim from an external system…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2024-11-07T15:04:31.7566667+00:00
David De Jaeger 25 Reputation points
commented 2025-08-08T18:13:11.5366667+00:00
Andre Correa 0 Reputation points
1 answer

Action required: Make a purchase by September 5, 2025 to continue using your tenant

Hi, I received the message: “Complete a purchase by September 5, 2025 to keep your account active.” However, I am actively using this tenant to create app registrations and to authenticate users via OpenID Connect (OIDC). Since the tenant is in use for…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-07-07T15:17:57.4933333+00:00
Jagadeesh Yarra 10 Reputation points
commented 2025-08-08T13:57:41.5233333+00:00
Praveen Chivarla 5 Reputation points Microsoft External Staff Moderator
1 answer

We are currently evaluating the migration from Azure AD B2C to Microsoft Entra. To complete our analysis and plan accordingly, we require clarity on the following items:

Problem Statement We are currently evaluating the migration from Azure AD B2C to Microsoft Entra. To complete our analysis and plan accordingly, we require clarity on the following items: Availability and parity of B2C features within Entra Planned or…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-07-17T12:49:16.43+00:00
ZTS 40 Reputation points
edited a comment 2025-08-07T20:34:08.53+00:00
Raja Pothuraju 29,560 Reputation points Microsoft External Staff Moderator
1 answer

Problem with Azure b2c sending 2fa mobile authentication sms to Chechia nunbers

This is similar to our request with ID: 2411****0001506 When a Czech mobile number (+420 **PII removed**90) is used for 2fa on the azure b2c built in login flow the user does not receive an sms and gets the error (The phone number you provided is…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-07-25T12:05:34.4566667+00:00
Andreas Mavromichalis 1 Reputation point
commented 2025-08-08T17:39:37.2833333+00:00
Raja Pothuraju 29,560 Reputation points Microsoft External Staff Moderator
2 answers One of the answers was accepted by the question author.

Unable to retrieve sign‑in logs (NonInteractiveSignIns, NonInteractiveSignIns_AuthDetails, MSISignIns, ApplicationSignIns)

I am attempting to retrieve sign‑in log files in Entra ID by navigating to Monitoring > Sign‑in logs > Download > CSV and clicking the “Download” button to obtain six log files. However, over the past three days, I have been receiving error…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-07T01:21:42.5066667+00:00
takeuchi kiyoko 41 Reputation points
answered 2025-08-08T01:57:45.4233333+00:00
takeuchi kiyoko 41 Reputation points
0 answers

Guest user is enabled to access the reports.

The report is housed in a workspace with Premium capacity. All the necessary steps are taken care to add cross-tenant access into the distribution group however the report does not reflect in their shared with me folder. Additionally, User does not have…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-07T17:41:54.4266667+00:00
mrunali rajwade 0 Reputation points
edited the question 2025-08-07T17:57:30.6333333+00:00
Gérard Oomens 105.1K Reputation points Volunteer Moderator