Cannot add a Microsoft account in Azure AD with the new portal

谁都会走 提交于 2019-12-10 18:28:56

问题


Some customers of ours are using external Microsoft accounts to access AAD services. Since we're not linked with their domain, and some of them use Gmail account, adding their entire domain to our AAD is hardly possible.

The old portal (manage.windowsazure.com) had the following screen:

The new portal has a guest system which hardly works (adding an external guest results in a generic B2BError: Unable to invite user with no other details -- even if the old portal still works), and "New user" can only create users with registered domains.

Is there a way, in the new portal (portal.azure.com), to add Microsoft accounts?

I'm asking this now, since this is technically a duplicate of How do I add a Microsoft account to Azure Active Directory?, because the old portal is sunsetting on November 30, 2017, at which point working like this will no longer be possible.


回答1:


Running New-AzureADMSInvitation helped me to get it working, with some more steps for our own setup:

  • Executed New-AzureADMSInvitation -InvitedUserEmailAddress account-to-invite@gmail.com -SendInvitationMessage $True -InviteRedirectUrl "http://mybusiness.com"
  • New-AzureADMSInvitation failed with an error, but one I could understand this time: The object either is sourced from an on prem directory or is undergoing migration
  • Went to check our on-prem AD if it had a user with the affected e-mail. It did not. Huh.
  • Ran a complete AD Sync cycle, just in case, on our on-prem AD with Start-ADSyncSyncCycle -PolicyType Initial
  • Waited until (Get-ADSyncScheduler).SyncCycleInProgress went back to False
  • Reexecuted New-AzureADMSInvitation, which worked this time.


来源:https://stackoverflow.com/questions/46969894/cannot-add-a-microsoft-account-in-azure-ad-with-the-new-portal

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!