New external/local user in B2C tenant

Question

Hello,I'm trying to use Microsoft Graph API in PowerShell to create external/local users in our B2C tenant, but I receive the following error: "The domain portion of the userPrincipalName property is invalid. You must use one of the verified domain names in your organization." There must be a parameter to switch from an internal or federated user to an external one, but I've been unable to find it. Any help you can offer would be appreciated! Here is my script:&nbsp;$NewUsers = Import-Csv $NewCSVPathForEach($NewUser in $NewUsers){&nbsp; &nbsp; $TestTheUser = $null&nbsp; &nbsp; $TestTheUser = (Get-MGUser -UserId $NewUser.UserPrincipalName -ErrorAction SilentlyContinue).Id &nbsp; &nbsp; IF ($TestTheUser) {&nbsp; &nbsp; &nbsp; &nbsp; Continue&nbsp; &nbsp; } &nbsp; &nbsp; else {&nbsp; &nbsp; &nbsp; &nbsp; $PasswordProfile = @{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Password = "Ninja%67#Dangerous"&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ForceChangePasswordNextSignIn = $false&nbsp; &nbsp; &nbsp; &nbsp; } &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; $UserParams = @{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisplayName = $NewUser.DisplayName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; UserPrincipalName = $NewUser.UserPrincipalName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; PasswordProfile = $PasswordProfile&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; AccountEnabled = $true&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; MailNickname = $NewUser.MailNickname&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; identities = @(&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; @{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; signInType = "emailAddress"&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; issuer = "&lt;MyTenant&gt;.onmicrosoft.com"&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; issuerAssignedId = $NewUser.UserPrincipalName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; )&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; passwordPolicies = "DisablePasswordExpiration"&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; New-MgUser @UserParams&nbsp; &nbsp; }}

balasubramanim · Answer

bstroot&nbsp;&nbsp;Error message indicates that the userPrincipalName is not in the correct format for an external user.To fix this, you need to modify the identities parameter in your script.&nbsp;Please try this..identities = @(@{signInType = "emailAddress"issuer = "&lt;YourTenant&gt;"issuerAssignedId = $NewUser.UserPrincipalName})Replace &lt;YourTenant&gt; with your actual B2C tenant name.Also, make sure the userPrincipalName in your CSV file is in the correct format for an external user, like username_&lt;YourTenant&gt;.

bstroot · Answer

Thank you for your reply. For anyone finding this in the future, my problem was that I was trying to specify the user principal name. My script works fine if I do not specify the user principal name.

balasubramanim · Answer

bstroot&nbsp;the issue arose because you were explicitly specifying the UserPrincipalName. In Azure AD B2C, it's better to exclude the UserPrincipalName for external/local users and let the system handle it through the identities field.For anyone facing a similar issue, the key solution is:Do not manually specify the UserPrincipalName when creating external or local users in an Azure AD B2C tenant. Instead, focus on defining the user identity using the identities parameter to ensure the user is correctly recognized as an external user.By exclude the UserPrincipalName, the system can handle the user creation process correctly.

Forum Discussion

New external/local user in B2C tenant

Share

Resources