We have setup Azure B2B Multi-tenant AD which allows external user as guest. Setup works well but for some reason few of our external customers (guest users) are not able to login.

Few are getting Admin Consent and few are getting these error message - 'Using application MYAPPNAME is currently not supported for your organization customer.org because it is in an unmanaged state.An administrator needs to claim ownership of the company by DNS validation of customer.org before the application MYAPPNAME can be provisioned.'

Major change we made here is from Single Tenant App to Multi-tenant Azure AD App.

I'm not sure about the login issue. I can tell you only about the failure to update policy.

As you configure cross-tenant access settings, if you receive an error that says “Failure to update policy due to object limit,” you've reached the policy object limit of 25 KB. We're working toward increasing this limit. If you need to be able to calculate how close the current policy is to this limit, do the following:

Open Microsoft Graph Explorer and run the following:GET https://graph.microsoft.com/beta/policies/crosstenantaccesspolicy

Copy the entire JSON response and save it as a txt file, for example policyobject.txt.

Open PowerShell and run the following script, substituting the file location in the first line with your text file:

 $policy = Get-Content “C:\policyobject.txt”

 $size = [System.Text.Encoding]::UTF8.GetByteCount($policy)  

 write-host "Remaining Bytes available in policy object"

write-host "Is current policy within limits?" 

if ($size -le $maxSize) { return “valid” }; else { return “invalid” }

For more details You can follow the documentation.

Azure B2B Multi-tenant application external user login issue

I'm facing an issue regarding a policy create in domain controller. How can I create a group policy for a particular OU to permit the users inside the OU have the access to installing software.

Active Directory GPO 

I've got 2 accounts on aws, 1 has MS ActiveDirectory on it, and the other has ec2 instance which should be adjoined.

How to code this in tf using iam policies ? There are actions like ShareDirectory and acceptShare (something like that)

active-directory

Trending Blogposts on active-directory

Popular Discussions on active-directory

openAzure B2B Multi-tenant application external user login issue

3

1

0

openActive Directory GPO

2

0

0

openAws Terraform - Cross account adjoin

2

0

0

PRODUCTS

QUICK LINKS

LEGAL