Azure Active Directory

Welcome to the Azure Active Directory suggestions and feedback site! We love hearing from you. If you have suggestions, please submit an idea or vote up an idea. We are monitoring the site actively.

Thank you for joining our community and helping improve Azure AD!

Wehave a new log in experience integrated with Azure AD, and we stronglyrecommend you log in with your Azure AD (Office 365) account. If yourUserVoice account is the same email address as your Azure AD account, yourprevious activities will be automatically mapped to your Azure AD account.  You can read more here for details: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Putting-customers-first-for-f...

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Remove confusion with which Microsoft Account and work account has the subscription

    I am having a difficult time figuring out which e-mail address I log in with for the Azure portal and which Microsoft Account is connected to it and my MSDN Subscription benefits. When I log in, it seems like 3 different Azure Active Directory "domains" are connected to my MSDN Subscription, but I don't understand how they all got connected together.

    I thought I had set up 2 different MSDN benefits and 2 separate Azure benefit subscriptions with 2 different e-mail logins, but that doesn't seem to be the case anymore. I don't know what happened and it is very…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  2. Allow AD users to login using their mail or mailNickname instead of userPrincipalName

    Using the Microsoftonline.com login page when triggering a PromptBehavior of Auto or Always using the AcquireToken method in the ADAL library. It would be useful if users we have registered in our AD could use any email to login with. And not be forced to create a Microsoft or AD account.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  3. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  4. Requesting email as a login is confusing when its an alias and not their Identity

    As our organisation has a coded AAD & AD Login ID (e.g. Staff Number) but the Email are an alias of their preferred firstname and lastname... It is confusing as we transition to a UPN based world where Microsoft login screens are always asking for "Email" as a login. Can we add the word "Identity" . Its a common word in the consumer world

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  5. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  6. The success registration page gets displayed multiple times for converge registration . Ideallt this should be displayed only once

    The success registration page should be displayed only once for converge registration . Ideally this should be displayed only once . As per design this page is displayed no of times based on products used by converge registration . IF user is using 100 products for converge registration then as per existing design the page will be displayed each time for each product

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  7. Improve Bitlocker Recovery Key user experience

    Current UX requires user to scramble find another internet access to find the recovery key(if they know what this is), then you need to enter the device keys and enter the long recovery keys. This UX is extremely painful and aggravating especially you are rushing. Please improve the user experience design by either adding this to Microsoft Authenticator, or some other solutions(QR code?) or eliminate this bitlocker nightmare completely from end user.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  8. create a custom attribute for cloud only users and be able to see this custom attribute is users's profile in Azure.

    Create a custom attribute for cloud only users and be able to see this custom attribute is users's profile in Azure.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  9. Dette forsto jeg ikke. Skriv en punkt for punkt forklaring på NORSK.

    Hvis det jeg skrev var for vanskelig å forstå. Hvordan tror dere det er å forstå alt det dere skrev for en eldre databruker. Dere er i Norge, her skriver vi norsk. Hvis dere ikke har norsktalende i staben deres, ansett noen. Dere har penger til det.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  10. your office 365 product ist to complicated. I wont buy it again. I need simple products. not hours of admin work.

    your office 365 product ist to complicated. I wont buy it again. I need simple products. not hours of admin work.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  11. Add the ability to disable users that haven't logging in after x amount of days.

    Add the ability to disable users that haven't logged in after x number of days.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  12. Bug: Password policy for cloud user accounts should allow the full alphabet

    The password policy for cloud user accounts does not allow the three last letters of the alphabet.

    This bug does not seem to apply to passwords for accounts created by e.g. DirSync.

    BTW: I'm Danish, and the alphabet of our users goes from A to Å, with the three last letters being Æ, Ø and Å. Our users consider this a bug, just like English speaking users would consider it a bug if X, Y and Z were not allowed.

    I'm sure Spanish and German speaking users have the same issue with ñ (as in mañana) and ö (as in…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  13. Az.Compute Update-AzVM/VMSS should accept userAssignedIdentities dictionary as parameter

    When assigning a user assigned identity to a VM/VMSS, the Az.Compute module command Update-AzVM/VMSS accepts the array IdentityIds but not the new parameter UserAssignedIdentities dictionary. Instead the command converts the IdentityIds array into the UserAssignedIdentities dictionary.

    This is an inconvenience because a VM/VMSS can have up to 1000 identities. When updating the VM/VMSS, it is much more succinct to use a dictionary because then the user only needs to include the individual user assigned identities they want to add/remove. It also matches the pattern that already exists when they look at the identity information on the VM/VMSS.

    With the IdentityIds…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  14. make terms of use available fpr non guest accounts in azuread

    es wäre schön wenn man nutzungsbedingungen bei datei freigaben über sharepoint auch versenden kann, wenn ein user nicht als gast account angelegt wurde. aktuell muss man immer mit einem one time code die datei annehmen und kann keine nutzungsbedingungen anzeigen lassen

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  15. Is there a way to eliminate the 'Pick an account' prompt for single-sign on applications?

    When enabling SSO for applications, we don't want Azure to prompt users to 'Pick an account' when first launching the application. Is there a way to improve the user experience of not having an additional prompt to get access to their SAS application?

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  16. Allow the ability to search from IAM at the subscription level and see all downstream access.

    If I (or another) add user/identity access at a granular resource or resource group level I should be able to see that access when I search from the IAM blade at the subscription level.

    For customers with large support organizations that have many engineers that need different levels of access and having to keep track of who/what you gave access at what level is a bit unreasonable.

    I should be able to simply search from the top/subscription level and see what all access is granted to a user/identity so it can be removed when it is no longer needed.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  17. Add support native peering cross subscription cross AD with AD Service Principle

    We found Azure native peering supports cross subscription cross AD only at guess user level. But for AD Service Principle native peering does not have support for now. I think it is important since for application using Azure RESTAPI/SDK API to automate the peering, Service Principle is necessary. Hope Azure can add this capabitiliyt soon.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  18. Provide an option to prevent guest access to your application but allow all members

    It would be nice to have an option for enterprise apps that when turned on or selected prevents guests in my tenant from accessing an Enterprise Application but allows all members to access the app.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  19. More logging, text files, historical data on AZ AD Sync

    Based on a recent problem we had, regarding AD Synch, we´ve noticed that there are no log files being generated locally and it´s very hard to find and keep track on what has happened during the syncs.

    We need more historical information, texte based, searchable, etc

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  20. Windows Server AD couldn't match Azure AD user

    Yesterday I tried to have on-premises AD take over my Azure AD user, by create a same user on local AD, use the same UserPrincipalName and ProxyAddress, and it worked.
    Today, I tried this on a brand new Windows Server, it failed several times. I got the email saying: The object has been updated in your Azure Active Directory, but with some modified properties, because the following attributes are associated with another object..
    I want to know why is that happened, and I want it's working.. Thanks in advance.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base