What triggers self-service sign-up for Azure Active Directory Email-verified user?

%3CLINGO-SUB%20id%3D%22lingo-sub-1865877%22%20slang%3D%22en-US%22%3EWhat%20triggers%20self-service%20sign-up%20for%20Azure%20Active%20Directory%20Email-verified%20user%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1865877%22%20slang%3D%22en-US%22%3E%3CP%3Ewe%20are%20planning%20to%20provision%20all%20users%20via%20AD%20Connect%20server%2C%20no%20users%20will%20be%20created%20directly%20in%20azure%20AD.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eupon%20checking%20Azure%20AD%2C%20some%20users%20already%20have%20pure%20cloud%20profile%20with%20property%3A%20%3CSTRONG%3EAzure%20Active%20Directory%20Email-verified%20user.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture.PNG%22%20style%3D%22width%3A%20331px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F232257i56D466A1B2FA0724%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Capture.PNG%22%20alt%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20triggers%20self-service%20sign-up%20for%20Azure%20Active%20Directory%20Email-verified%20user%3F%3C%2FP%3E%3CP%3Eis%20it%20ok%20to%20turn%20it%20off%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22hljs-pscommand%22%3ESet-MsolCompanySettings%3C%2FSPAN%3E%3CSPAN%20class%3D%22hljs-parameter%22%3E%20-AllowEmailVerifiedUsers%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-literal%22%3E%24false%3C%2FSPAN%3E%3CSPAN%20class%3D%22hljs-parameter%22%3E%20-AllowAdHocSubscriptions%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-literal%22%3E%24false%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22hljs-literal%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fenterprise-users%2Fdirectory-self-service-signup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fenterprise-users%2Fdirectory-self-service-signup%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22hljs-literal%22%3Etnx%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1865877%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1867584%22%20slang%3D%22en-US%22%3ERe%3A%20What%20triggers%20self-service%20sign-up%20for%20Azure%20Active%20Directory%20Email-verified%20user%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1867584%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20a%20process%20similar%20to%20B2C%2C%20but%20for%20%22regular%22%20AAD%20instances...%20The%20vast%20majority%20of%20organizations%20using%20O365%20will%20not%20need%20this%2C%20so%20you're%20safe%20to%20toggle%20the%20corresponding%20flags%20via%20PowerShell.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Super Contributor

we are planning to provision all users via AD Connect server, no users will be created directly in azure AD.

 

upon checking Azure AD, some users already have pure cloud profile with property: Azure Active Directory Email-verified user.

 

Capture.PNG

 

What triggers self-service sign-up for Azure Active Directory Email-verified user?

is it ok to turn it off?

 

Set-MsolCompanySettings -AllowEmailVerifiedUsers $false -AllowAdHocSubscriptions $false

 

https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/directory-self-service-sign...

 

tnx

1 Reply

It's a process similar to B2C, but for "regular" AAD instances... The vast majority of organizations using O365 will not need this, so you're safe to toggle the corresponding flags via PowerShell.