Setting ad login on Azure by default

[m0bov]

Hi all. We recently had to reinstalled our AADsync app and updated to the latest one with a clean install.

 

 

I noticed at one of our domains (not the one the aadsync is running from) that although the user is created, their login name is the set to the tenant domain i.e. ommicrosoft.xxxxxx

 

I'm having to go into Entra and change their username domain to match the local AD.

 

I recall when we installed the old version of AADSYNC you "mapped" the local ad domain suffixes. It seemed to work ok, but now with the newer version its not.

 

I found an option in Entra to log in with alternative email. Also in Entra ID there were some options, or is this something missing in the fresh AADSYNC installation?

 

 

Thanks for any pointers!

[localzuk]

This is controlled by their UPN suffix in Active Directory for us. We simply have our "real domain" set as their UPN suffix as part of their UPN. No mapping needed.

[m0bov]

Hi, yes we have this as well. But its not set as the default username in Azure.

[chaplic]

This is either the domain set as UPN in question isnt registered in azure AD, or something has gone funky ad there's a clashing account name.

 

As it seems you have multiple domains, I wonder if someone had previously written a custom rule to remap upn to another field. For example if domainA has school.com then domain B cannot have school.com as well. but you might want that for logins into Office365. So in DomainB decide on an attribute for UPN (e.g. Extensionattribute1) and map that to UPN for that domain

 

Looking at an affected user in the sync service may render some clues, as would a full dump of all AD users and fields in the problem domain

[m0bov]

I think we sorted it, the login domains got changed back to the local AD, swapped them back their e-mail domain and seems to be all ok.