Forum Widgets
Latest Discussions
Connect to power pages using Azure AD B2C token
Hi, I am working on a scenario where user logins to the mobile app using username and password. The username and password are used to get ID and access token from azure AD B2C like: URL: https://login.microsoftonline.com/<TENANT_ID>/oauth2/v2.0/token grant_type=password&client_id=<CLIENT_ID>&client_secret=<SECRET>&scope=openid&username=<USERNAME>&password=<PASSWORD> now after getting the id_token and access token, I tried passing it in header as bearer token and as well as in query params as well. After these steps, it still lands me to the sign-up page instead of the singed in page and not the page to where I should be directed as an authenticated user.
Evaluating Azure Cross-Tenant Synchronization: Benefits and Concerns
We’re looking into this Azure feature and how it would benefit the 4 tenants we manage. Reading MS learn and other articles, they highlight many of the benefits, but what about the got chas? Several areas of concern right off the bat are: How are users affected with devices not in Intune from one tenant (child - them) accessing a tenant with active CAPs (primary - us) that require compliant enrolled devices? Does the sync take precedence over the CAPs (Conditional Access Policies)? Are there any effects on guest user (b2b) access? How does this affect established SharePoint/OneDrive sharing access. Are the SP/OD sharing settings still in affect? When you sync identities, do you have granular control what gets synced and to what resources? Known issuesbrings up an issue with special characters. Our child tenants are in the EU, Africa, and in China that use them. Has anyone had issues? Thank you in advance sharing your experiences with this.
Work Item issue
I created a work item that has a required multi-select field. When I pull up the work item in Edge, I can see that the field is a required muti-select field. However, when the user opens the work item, the field is not required. We are both using the Edge browser. Has anyone had this problem?
How to track the parent and child relationships within the entire hierarchy in Azure DevOps (ADO)?
I am currently facing a situation where I can track the parent-child relationship up to only two levels. Our structure consists of the following hierarchy: EPIC > FEATURE > USER STORY > TASK. At present, I can trace relationships up to two levels but need to modify my query to capture the subsequent child relationships. Could you please let me know if it is possible to track all these relationships in a single query?
Combined SSPR and MFA policy issue
I'm dealing with an issue after migrating to the new MFA and SSPR combined policy, something we need to complete before October 2025. Old situation, before migrating to the new MFA policies: SSPR, separate policy. We do require 2 methods for resetting password, this may include weaker methods like SMS or Email. Legacy MFA policy with Microsoft and third-party authenticators only. User experience: When users are being asked to register an authenticator for the first time, they got the combined registration experience (2 steps) where they register their authenticator and a second authenticator for SSPR which was SMS or email. When the user wanted to reset their password using SSPR they had to authenticate first with their authenticator and the next step was to enter a code they got by SMS or email. All according to Microsoft recommendation and this all worked fine, until I migrated to the new combined MFA policies. Issue: I migrated to the new MFA policies and I still want to enforce 2 methods for SSPR, so an authenticator and SMS or email, however I don't want to allow users to use SMS or email for sign-in as it is not considered as safe. To enforce strong authentication methods, I use "authentication strength" allowing Microsoft and third-party authenticators only. If I wouldn't use authentication strength, I would allow users signing in with SMS as well. (since we now have a combined policy) However, this setup breaks the combined registration and SSPR interrupt mode, it simply doesn't work any more. As soon I apply the authentication strength, the users are only prompted to register an authenticator, combined registration is gone. Funny is that it doesn't even work when I allow SMS in the authentication strength. It allows me to register SMS, still no combined registration (2 methods) So basically, it means that users have to register their second method manually and afterwards in their personal sign-in properties, or I have to remove the 2 methods requirement from SSPR. I'm not in favour of doing this. I submitted a ticket to Microsoft, but I have the feeling they don't understand my issue. They even suggested enabling "Password only" in the authentication strength, as combined registration then suddenly works. Surprising solution as it enables unsecure 1-factor authentication. Anyone who was able to get SSPR and MFA combined registration working while using Authentication strength?
A question about migrate account
Hi all, We have a hybrid join AAD, we need to migrate a colleague‘s account from A account to B accont, I think two way but I don't know which method is feasible: 1 Directly changing the account name, will his original account's OneDrive and Exchange accounts also be changed? 2. Create a new account directly and move OneDrive and mail data over? May I ask which method is more suitable?
From Doubt to Victory: How I Passed Microsoft SC-200
Hey everyone! I wanted to share my journey of how I went from doubting my chances to successfully passing the Microsoft SC-200 exam. At first, the idea of taking the SC-200 seemed overwhelming. With so many topics to cover, especially with the integration of Microsoft security technologies, I wasn’t sure if I could pull it off. But after months of studying and staying consistent, I finally passed! 🎉 Here’s what worked for me: Study Plan: I created a structured study schedule and stuck to it. I broke down each section of the exam objectives and allocated time for each part. Authentic Exam Questions: I used it-examstest for practice exams. Their realistic test format helped me get a good grasp of the exam pattern. Plus, the explanations for the answers were super helpful in understanding the concepts. Practice Exams: I did multiple mock tests. Honestly, they helped me more than I expected! They boosted my confidence, and I could pinpoint areas where I needed to improve. SC-200 Study Materials: I relied on a combination of online courses, books, and video resources. Watching the study videos and taking notes helped me retain the information better. Don’t Cram: I didn’t leave things to the last minute. It took me about 2-3 months of consistent study to get comfortable with the material. I made sure to take breaks and not burn myself out. Passing this exam felt amazing! If you're in the same boat and feeling uncertain, just stick with it! It’s a challenging exam, but with the right tools and preparation, you can do it. Keep pushing forward, and good luck to everyone! 💪 Would be happy to answer any questions if anyone has them!
