Preferred Aad Tenant Domain Name with multiple domains in tenant

[tcable]

Hi

 

I don't think this is actually possible, as I can't find anything on the internet, but lets see.

 

I know 'Preferred Aad Tenant Domain Name' exists, and what it does, however can it handle multiple domains? For example we have 2 domains: domain1.co.uk and domain2.co.uk in our tenant, and users that use one or other to log on. This is under a single office 365 subscription.

 

In 90% of cases we know what domain is likely to log onto a machine, so not a problem to have two different ones and use a group to filter them out. But for the other 10% users from either domain could log in.

 

Now I know that you can put in the full UPN and it will overwrite the default setting, however for the purposes of making everything universal and not having to explain to my users that on some machines you need to put in the full email address and some you don't, it would be nice if it didn't matter what domain the user was on, they could just use the first part of there email address (like domain computers do)

 

If it's not possible (which I don't think it is), I don't think I will apply this setting at all, but before I rule it out completely, want to make sure there's no trick out there to make it work.

Edited March 24, 2024 by tcable

[snagrat]

Can you give the other users an alias in the more common domain?

 

If so, this may help https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-use-email-signin

 

Not sure if it works for AAD Joined devices but in theory should

[tcable]

I'll give this a go - i suppose I'm thinking that the username is the field that matters, as that's the login id, so an alias won't matter.

I'll give this a go tomorrow and report back.

[tcable]

just seen this on the page:

 

• Unsupported scenarios - The following scenarios are not supported. Sign-in with non-UPN email for:
   
  
  • Microsoft Entra hybrid joined devices
    
  • Microsoft Entra joined devices
    
  • Microsoft Entra registered devices
    
  • Resource Owner Password Credentials (ROPC)
    
  • Single Sign-On and App Protection Policies on Mobile Platform
    
  • Legacy authentication such as POP3 and SMTP
    
  • Skype for Business
    

 

Which may suggest it doesn't work, but i'll still give it a go.