·
If you are unable to grant admin consent to an app registration in Entra ID with an error suggesting a missing service principal, this article will outline the steps to resolve the issue. Symptom You got an app registration in Entra ID, and try to grant admin consent to a permission and receive the below…
·
This article aims to simplify the migration from legacy MFA and SSPR policies to the new authentication methods policy in Entra ID. While there is an official documentation from Microsoft on authentication methods policy migration, I find it is outlined in an unnecessary complicated manner in the article – I hate that it is not…
·
We will be looking at multiple reasons why you may run into ‘DeletingCloudOnlyObjectNotAllowed’ sync error in Entra connect sync health and how to resolve this sync error. Symptoms Error in Microsoft Entra ID You might receive emails about sync error via the Entra connect health. This then can be checked under Microsoft Entra ID >…
·
We will be detailing the cause and the fix to any of the three below errors when trying to add or delete authentication methods. Symptoms User trying to add new Authentication method – possibly Microsoft Authenticator app The user will see ‘Uniqueness validation’ error message in their Microsoft Authenticator app when attempting to register new…
·
You might run into the weird error ‘Unable to save the changes’ when changing the setting under Authentication methods for Report suspicious activity or System-preferred multi factor authentication. You could enabling it or disabling it or setting it to Microsoft Managed. Frustrating part to this error is that it doesn’t tell us much, and there…
·
This article will outline the steps to change the default MFA sign in method of a user or multiple users in bulk via Microsoft Graph Powershell Module. What is a default sign in method ? Setting a method as default means it will be the method automatically shown to the user when the user must…
·
In this article, we are outlining the steps to enable ‘CloudPasswordPolicyForPasswordSyncedUsersEnabled’ for syncing users using both Microsoft Graph PowerShell module and MSOnline module. When using password hash synchronization with Microsoft Entra Connect Sync, by default, all users that are in sync scope are synced with password set to Never Expire in cloud. This means that the…
·
This article will detail the steps to manually hard match users using the newest Microsoft Graph PowerShell module, and also the deprecated MSOnline module. Microsoft doesn’t details on how to manually hard match users in case soft matching fails via Entra connect sync (Azure AD connect). When you sync with Entra connect sync, it checks…
·
Microsoft recently released Entra Connect Sync (AAD connect) version 2.3.20.0, which is a security update. With the speed in which Microsoft is currently deprecating Entra connect versions,(12 months from the date that a newer version is released.) you will be faced with challenge to upgrade to the latest version sooner. Some customers who are trying…