Cloud Essentials
6 TopicsSecurity group not syncing to AAD
Hi All, My Azure AD and onpremises AD were in sync and all the Users and groups were syncing properly, but all of a sudden my Security groups are not syncing to AAD. Whatever changes I make on ON-premises AD groups it does not reflect on AAD, but when I make changes/create a user it works fine. Any help would be highly appreciated. Thanks & Regards, Srikanth.20KViews0likes5CommentsDynamic group membership rules with application assignment
1. I have a dynamic user group (Microsoft365) (CRM users) --- originating from random AD OUs or departments. where group name should be "CRM users. 2. I have CRM application name "CRM" 3. I want to populate the Dynamic group with all staff using this "CRM" the first step i have done; - I created a rule based on department (user.department -contains "Medical") and (user.accountEnabled -eq True) this works, but only for that department - Now I want to assign users this application, then add them to dynamic group. So that all users of CRM, automatically belong to "CRM users group". ___>>> (user.objectId -ne NULL) and (user.accountEnabled -eq True) and (applications.applicationId -eq "38bb468d-88ef-46d4-ad2d-8d57c1903964") ,,,, this is not working.3.2KViews0likes4CommentsHow to get access to Enterprise Application after assigning user/group?
Hello, In Azure AD, the Enterprise app "App1" is assigned by "Group1" , however the user of "Group1" are still facing the error as follows when trying to authenticate the App1: "App1 needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it." Please find the user consent settings is as follows: Any clue on the error? Thanks,993Views1like0CommentsAzure AD account suddenly demanding Two Factor Auth Which Doesn't Work
I created an Azure account earlier today as I am studying for Azure certification. All went well for several hours, but stepped away for lunch and was timed out. Cannot get back into account because it is demanding 2FA using the Microsoft Authenticator app which never once has worked for me. Two years ago I had our InfoSec group delete the requirement after I showed them my problems and pulled up thousands of help desk tickets with the same problems. Tried it again, and of course it doesn't work. Why did the Azure AD suddenly revert to 2FA? How do I get into the account to kill that requirement as there is no Azure support for free accounts?2.3KViews0likes2CommentsConditional Access policies Report-Only mode
Hey guys, My take on how to switch ON and successfully analyze Azure AD Conditional Access Policies with "Report Only" mode before you run in to any surprises. How to analyze Conditional Access Policies with ‘Report Only’ Mode? – Shehan Perera [techBlog]1.3KViews2likes0Comments