Forum Discussion

Thomas Habersatter's avatar
Thomas Habersatter
Copper Contributor
May 15, 2017
Solved

Azure AD B2B SharePoint on Premise using Groups

Having SharePoint OnPrem, ADFS, Azure AD Sync etc in place and wanting to use Azure AD B2B for external user access the authentication of external users in the SharePoint Web Application is now possi...
Azure AD B2B
  • Thomas Habersatter's avatar
    Thomas Habersatter
    Jun 07, 2017

    Now Azure AD Groups are transmitted as Roles-Claim to SharePoint. The only thing we changed was the AzureCP configuration (Claims Provider) by removing the UPN Claim, so that only EmailAddress and Role is used as Claim types mapped to Azure objects.

Sarat Subramaniam's avatar
Sarat Subramaniam
Icon for Microsoft rankMicrosoft
May 19, 2017

Inorder for B2B users to access OnPrem applications, you need to:

1. Set up App proxy for Authentication to work

2. Write back B2B users to OnPremises for Authorization to work

 

We are working on making this more seamless in the future.

Deleted's avatar
Deleted
Sep 14, 2017
What do you mean by "Write back B2B user" are you referring to leveraging AD connect? We are facing this same challenge. We have an on-prem SharePoint but need to share webaccess to external users.
  • roykim's avatar
    roykim
    MVP
    Sep 15, 2017

    My understanding the user writeback is no longer supported in Azure AD Connect

     

     

    • null null's avatar
      null null
      Copper Contributor
      Apr 05, 2018

      Hi

      I don't know how you solved this but I'm using accounts defined in AzureAD (members and B2B guests), putting them in Azure groups (usage of AzureCP to see them in People Picker). The "Role" claim with the Azure group will appear in the claims associated to the user for Azure AD members and Azure AD Guest but only when defined as Microsoft Account (= source). When the source is "Azure AD External", it won't appear. Any idea ?

Resources