Invitation Flows for AAD B2B Users
Invitation flows b2b users AAD B2B users have to be invited. Either via an email invitation or a direct URL link. There are also backdoor mechanisms (powershell and graph API)…
App Visibile in MyApps versus Access to apps
There is a common misconception around AAD apps. If you can see it in myapps, you have access to it - otherwise you do not. This is not entirely true.…
AAD External users (vendors etc) and Office 365 Access
Guest Users (aka B2B Users) These are users that are added as 'Guest' users in your AAD tenant. Some external users ( vendors ) are truly B2B users. For example,…
Query AAD for all members of a group
To query AAD for all members of a group (note that the -All flag does not retrieve all users - try the -Top option instead) Get-AzureADGroupMember -ObjectId "my_obect_id" -Top 200000…
ADFS to AAD Tips and Tricks
View ADFS Activity within the Azure Portal Install the AD Connect Health Agent (using Powershell and AD Admin Credentials) When migrating apps from ADFS to AAD, keep in mind any…
Azure AD Add Role Assignments using Powershell
Assuming you have an enterprise app configured (staged) - Exchange - and need to assign multiple users with the same role ( User) to the app. Quick Test and Connect…
B2B advantages over B2C users in AAD
Also read B2B partner Identities in Azure AD and Migrating Existing AD users to AAD Why B2C? Why not just use AAD? There's two reasons : Scale (B2C usually has…
Common AAD Powershell Commands
Get all the users in a group Get-ADGroupMember 'Developers' | select-object name Get all the group memberships for a specific user Get-ADPrincipalGroupMembership $user | select name Next Steps? Need an…
Powershell for Managing O365’s AAD
(Also read, Usage and Insights for Migrating ADFS Apps to AAD) To manage Azure AD for Microsoft 365: Azure Active Directory Module for Windows PowerShell Version 1 of the module…
Usage and Insights to Migrate ADFS Apps
(Also read, ADFS Federated users in AWS ) One of the coolest ways to visualize ADFS information is by adding an ADFS to Azure AD feed on each ADFS instance…