Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more here.

Azure Active Directory

Welcome to the Azure Active Directory suggestions and feedback site! We love hearing from you. If you have suggestions, please submit an idea or vote up an idea. We are monitoring the site actively.

Thank you for joining our community and helping improve Azure AD!

Wehave a new log in experience integrated with Azure AD, and we stronglyrecommend you log in with your Azure AD (Office 365) account. If yourUserVoice account is the same email address as your Azure AD account, yourprevious activities will be automatically mapped to your Azure AD account.  You can read more here for details: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Putting-customers-first-for-f...

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. 2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  2. video

    The AAD connect video voice-over is unintelligible. I know you want the videos to be done by the engineers so they know what they are talking about but if you can't make out what they are saying, what's the point in putting a video on there?

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  3. Does Microsoft Azure support follow SLA?

    Hi there, I raised a ticket 118020217581898 at least 3 days ago, but no one response so far. I am not sure if Microsoft AZure follow SLA or not. According to my understanding, for Severity B, the response time is 4 hours. If Microsoft can not provide service following b y SLA, why are we paying big money for annual subscription? The service you provide does NOT deserve your reputation. Consider this as formal complaint for your record.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  4. ASR on Red Had Linux - unstable after kernel update

    After enabling ASR on Red Hat 7.3, a subsequent kernel update to 7.4 caused ASR to start failing. I then disabled / enabled ASR replication which made it work again.

    After a few days, the Redt Hat OS started crashing due to kernel panic.

    Existing support tickets

    SR 118022117678398, 118020117568199

    We have gone away from ASR for now and created new Red Hat VMs from scratch without ASR enabled.

    How can this be prevented in the future releases of ASR? Disabling kernel update from yum install update can be another course of action until ASR supports an OS version.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  5. MyApps Approval Request approval link

    The link "Go to My Apps" should point at the application and the correct tenant where the approval was made. ex. https://account.activedirectory.windowsazure.com/r?tenantId=1d063515-0000-4195-9486-ea65df434faa/applications

    If the approval was made from a Azure B2B partner it doesn't make much sense to take the user to the users default directory

    4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  6. 4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  7. Correct behavior when Seamless SSO fails, so that the cursor is placed into password field.

    Currently when Seamless SSO fails (example: due to signing on with a different user account than current), the cursor is placed into the username field rather than password. This typically then ends up having the user starting to type their password in clear text into the username field. This is especially a problem when sharing your screen with others, shoulder surfing, etc.

    8 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  8. Myapps self service approval flow

    Today approves get email to approve request.
    But there is no possibility for approves to see history.

    It also might be worth having an option to send email to approves once an approver have approved/denied a request.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  9. Send out an email when users gets assigned to application

    I have been migrating our 100s of applications to Azure from an OpenAM SSO solution.
    When a user gets added to an application in Azure. It would be a great idea that the users gets an email stating that they have been added.
    If users can get alerts that a new application has been added for access, that would help with end user confusion.

    4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  10. Source of Authority in user overview page should show same info as Source in user profile

    In New Azure Portal it would be of more use if
    Azure Active Directory -> Users and Groups -> All users
    page column "Source of Authority" would show that same value as in
    Azure Active Directory -> Users and Groups -> All users -> <click a user>-> Profile and field Source

    Ps. This works better in Azure Classic Portal. Ds.

    4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  11. Support to show contents on AD Login Page coming from CMS like Sitecore

    I am talking about content published from a CMS like SiteCore like
    News or announcement item which can come up as a fragment on the AD Login page.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  12. No photo available in myapps application panel

    The AAD Application panel is making use of the AAD thumbnailphoto attribute. In most environments this is a different photo as the O365 photo.

    It would be a good end user experience to provide AAD admins functionality to configure which photo can be used: O365 photo (can be set with Outlook web, Skype or Delve) or the AAD photo (which can be synced from AD on prem and is also current behavior).

    The other option would be to provide an option to sync O365 photo to AD on prem, which then would sync back to AAD. Less preferred in my…

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  13. Make knownClientApplications manifest property work across tenants

    As described in Vittorio's book (https://www.microsoftpressstore.com/articles/article.aspx?p=2473127), the 'knownClientApplications' property only works for API and client that are published in the same tenant directory.

    We offer a multi-tenant API that is consumed by app teams and ISVs that publish their APIs in a different tenant. Our and their applications are branded completely different.

    Forcing tenants that subscribe to the SaaS applications published by these teams to go through two consent flows is really ugly.

    Making the 'knownClientApplications' property work across tenants would solve this problem cleanly.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  14. Force Azure Active Directory Join Out of Box Experience

    The device is to be provisioned to a corporate user but will not be joined to the on-premises Active Directory. There should be a provisioning package option to force the user to join the device to Azure Active Directory rather than presenting other options that leave the machine in workgroup mode or given the option to join the on-premises domain.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  15. Onboarding page for new users

    For end-user experience / security / easy enrollment / completeness of profile information, it would be nice if there is a onboarding page for new users.

    The users gets his or her personal account and temporary password with which he or she can login to the onboarding page. Login to other services is also possible but results in a redirect to the onboarding page.

    On the onboarding page the user must reset the temporary password to it's own password (with customizable info about password requirements), fullfils the secret questions, can register to MFA and SSPR, can review, adjust and supplement…

    5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  16. Allow per-device credential management in iOS for WAAD accounts

    I currently have +10 Microsoft developed apps towards Azure and Office365 on my iPhone. I also employ MFA for my account. On average I have to perform the sign-in flow 4-6 times per week on my personal iPhone for the various apps. E.g. OneNote has updated, have to log in again. OneDrive needs to re-login with my LiveID and OrgID. I just re-authenticated in OneNote, but opening PowerBI immediately after repeats the login flow. I just MFA authenticated in the Groups app, but switching to OneNote starts another auth process.

    For a regular end-user this makes the use of the…

    7 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  17. Wait Until Submission to Display Errors

    Wait Until Submission to Display Errors

    Example: as soon as I begin typing into and email field, an error is displayed right away to indicate it is not a valid email value. This is very annoying for users.

    It would be better to wait to display errors until the user clicks one of the "submit" buttons (Send verification email, create etc).

    Or at the very least, wait until the field loses focus.

    5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  18. Username is incorrect when logging into the Azure portal

    Recently, when I log into Azure my user id is incorrectly generated and stored in the browser. This occurs when I am logged into Azure and my connection times out. I have access to two subscriptions and it looks the like incorrect user ID is being generated by the subscription that I've been added as a co-admin on.

    Attaching a screenshot of the issue. Let me know if you need more data to help debug.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  19. Switching between azure subscription is not smooth- user id gets a lot of unwanted characters and password is required

    From new azure portal Switching between azure subscription is not smooth- user id gets a lot of unwanted characters and password is required

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  20. Profile picture not displaying when sigin in with Microsoft account (@live.*, @outlook.*, @hotmail.*)

    Profile picture not displaying when sigin in with Microsoft account (@live., @outlook., @hotmail.*)

    But all other AD, @microsoft.com, @custom.tld are displaying the correct profile pic

    6 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  End user experiences  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base