Forum Discussion

KyleSchroeder's avatar
KyleSchroeder
Copper Contributor
Oct 05, 2018
Solved

Force OneDrive client to sign into a different tenant

We are going through a merger, and as part of that must migrate our users from TenantA to TenantB.  Currently we have separate AD domains and SSO platforms, though there is some federation (I'm not 100% clear on the details).  We have a fair number of users who have not yet gotten on board with OneDrive, so rather than get them setup in TenantA, we'd like to push them over to TenantB right off the bat.  If I go to tenantb-my.sharepoint.com and sign-in with my user@domainA.com credentials, I am able to view my OneDrive in TenantB (this was setup on our independent authentication SSO system and works fine).

 

The problem we're facing however is to force the user to connect to TenantB via the OneDrive client.  If they use user@domainB.com on the "Sign in to OneDrive" window, we get an authentication error that we need to sign in with domainA credentials. If I use user@domainA.com, then it tries (and fails) to setup the OneDrive in TenantA (which is blocked by the "only allow certain tenants" GPO, mentioned below).

 

I've tried using the various GPO settings to force the OD client to only connect to TenantB.  I've tried onedrive.exe /configure_business:tenantB-GUID, set EnableADAL (why isn't this a GPO option yet, btw!), Silent AutoConfig (with the requisite max OD size configured), but no matter what I do, OD always pops up with the "Enter your email address".  Is there some other way to call onedrive.exe so that it suppresses the sign-in dialog, something like:

onedrive.exe /configure_business:tenantGBuid /useremail:user@domainA.com /silent /URL:https://tenantb-my.sharepoint.com

Am I maybe just coming up against a limitation of the OD client and how it can be manipulated to login to a specific tenant?  I'm even tried pre-creating a Business1 account entry at  HKCU\Software\Microsoft\OneDrive\Accounts\Business1\  with various fields pre-configured, like UserEmail = user@domainA.com or something (though that didn't work either; OD trashed the Business1 key and created it fresh when it tried to sign in).

  • StephenRice's avatar
    StephenRice
    Oct 18, 2018

    Hi KYLE SCHROEDER,

     

    Sorry for the delay! The team is taking a look and may need additional details. It looks like the support case is still active as well so let's use that to engage & discuss. Thanks!

     

    Stephen Rice

    OneDrive Program Manager II

9 Replies

  • poojanair's avatar
    poojanair
    Former Employee

    KyleSchroeder  Hey, you got the answer for the same? I ran into the same issue. If yes, please provide the solution so that it will be helpful for all of us  🙂

    • KyleSchroeder's avatar
      KyleSchroeder
      Copper Contributor
      Great, thanks Juan Carlos for tagging Stephen. Hoping he has the key!
      • StephenRice's avatar
        StephenRice
        Icon for Microsoft rankMicrosoft

        Hi all,

         

        I don't have the key but let me pass this along to some of our area experts and see what we have. Thanks,

         

        Stephen Rice

        OneDrive Program Manager II

Resources