SOLVED
Home

Official recommendation to UPN equal to SMTP/email address

%3CLINGO-SUB%20id%3D%22lingo-sub-751114%22%20slang%3D%22en-US%22%3EOfficial%20recommendation%20to%20UPN%20equal%20to%20SMTP%2Femail%20address%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-751114%22%20slang%3D%22en-US%22%3E%3CP%3EI%20know%20that%20the%20UPN%20should%20be%20set%20to%20the%20same%20value%20as%20the%20email%20address%20for%20many%20reasons%2C%20but%20I%20can't%20find%20the%20official%20documentation%20from%20Microsoft%20where%20they%20recommend%20this.%20Can%20someone%20please%20point%20me%20to%20it%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-751114%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-751659%22%20slang%3D%22en-US%22%3ERe%3A%20Official%20recommendation%20to%20UPN%20equal%20to%20SMTP%2Femail%20address%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-751659%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1096%22%20target%3D%22_blank%22%3E%40Dean%20Gross%3C%2FA%3E%26nbsp%3BHaven%C2%B4t%20found%20any%20more%20in-depth%20statement.%20But%20in%20the%20article%20about%20Alternate%20ID%20there%20is%20a%20note%20stating%3A%20%22%3CSPAN%3EMicrosoft%E2%80%99s%20recommended%20best%20practices%20are%20to%20match%20UPN%20to%20primary%20SMTP%20address.%20This%20article%20addresses%20the%20small%20percentage%20of%20customers%20that%20cannot%20remediate%20UPN%E2%80%99s%20to%20match.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-fs%2Foperations%2Fconfiguring-alternate-login-id%23applications-and-user-experience-after-the-additional-configuration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-fs%2Foperations%2Fconfiguring-alternate-login-id%23applications-and-user-experience-after-the-additional-configuration%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20helps!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EViktor%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-751666%22%20slang%3D%22en-US%22%3ERe%3A%20Official%20recommendation%20to%20UPN%20equal%20to%20SMTP%2Femail%20address%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-751666%22%20slang%3D%22en-US%22%3E%3CP%3EI%20don't%20think%20there's%20anything%20%22official%22%20official.%20It's%20mentioned%20as%20%22best%20practice%22%20in%20multiple%20articles%2C%20for%20example%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fadmin%2Fadd-users%2Fchange-a-user-name-and-email-address%3Fview%3Do365-worldwide%23tip-keep-the-persons-old-email-address%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fadmin%2Fadd-users%2Fchange-a-user-name-and-email-address%3Fview%3Do365-worldwide%23tip-keep-the-persons-old-email-address%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20reality%2C%20it%20depends%20on%20the%20workload%20and%20the%20client%20app.%20Some%20of%20them%20have%20a%20proper%20understanding%20of%20the%20difference%20between%20UPN%20and%20SMTP%20address%2C%20others%20%22assume%22.%20Microsoft%20does%20enforce%20it%20for%20some%20endpoints%20though%2C%20for%20example%20when%20making%20changes%20via%20the%20O365%20Admin%20Center.%20They%20also%20have%20a%20requirement%20that%20at%20least%20one%20of%20the%20smtp%20addresses%20should%20match%20the%20UPN%20in%20O365%20(not%20necessarily%20the%20primary%20one%20though).%3C%2FP%3E%3C%2FLINGO-BODY%3E
Dean Gross
Respected Contributor

I know that the UPN should be set to the same value as the email address for many reasons, but I can't find the official documentation from Microsoft where they recommend this. Can someone please point me to it?

 

2 Replies

@Dean Gross Haven´t found any more in-depth statement. But in the article about Alternate ID there is a note stating: "Microsoft’s recommended best practices are to match UPN to primary SMTP address. This article addresses the small percentage of customers that cannot remediate UPN’s to match."

 

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configuring-alternate-logi...

 

Hope this helps!

 

Regards,

 

Viktor

Solution

I don't think there's anything "official" official. It's mentioned as "best practice" in multiple articles, for example here: https://docs.microsoft.com/en-us/office365/admin/add-users/change-a-user-name-and-email-address?view...

 

In reality, it depends on the workload and the client app. Some of them have a proper understanding of the difference between UPN and SMTP address, others "assume". Microsoft does enforce it for some endpoints though, for example when making changes via the O365 Admin Center. They also have a requirement that at least one of the smtp addresses should match the UPN in O365 (not necessarily the primary one though).

Related Conversations
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies