Azure Active Directory

Welcome to the Azure Active Directory suggestions and feedback site! We love hearing from you. If you have suggestions, please submit an idea or vote up an idea. We are monitoring the site actively.

Thank you for joining our community and helping improve Azure AD!

Wehave a new log in experience integrated with Azure AD, and we stronglyrecommend you log in with your Azure AD (Office 365) account. If yourUserVoice account is the same email address as your Azure AD account, yourprevious activities will be automatically mapped to your Azure AD account.  You can read more here for details: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Putting-customers-first-for-f...

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. sorting users in groups alphabetically

    The fact that the portal displays users in groups in some random fashion with no ability to sort alphabetically is unbelievable. Also, the fact that we do not have a "show all" option for lists, instead we have to load more which doesn't show much more at all. It would also make sense to have a search function built in to the groups page I don't understand why there isn't. Please add in the functionality to at least automatically sort alphabetically.... I would be eternally grateful!

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  2. Configure an expiration policy for Office 365 groups for each group.

    I would like to configure an expiration policy for Office 365 groups for each group.
    But , currently only one expiration policy can be configured.

    I hope to be able to set the following example.
    A group lifetime is 180 days and B group lifetime is 30 days.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  3. Increase allowable square logo file size for company branding.

    The 10000 byte file size is not quite large enough for our 240x240 logo

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  4. Integrate Azure and Office 365 Health, Reporting, Audit, and Activity information fully with OMS/Log Analytics

    Bring all the analytics and monitoring from all Microsoft cloud services Azure and Office 365 into OMS/Log Analytics please!

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  5. Bitlocker sync status

    Is there a way to let a device sync to Azure Active Directory every hour or so if Bitlocker is still active? You can already see the decryption key and when it is registered. However, we have to have prove that the device was encrypted at the moment it was stolen.

    Thank you in advance!
    Roy

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  6. Allow creation of SAML Roles in portal

    Currently to create new roles for a SAML app, I have to either hope the application provider has given me an app manifest, or create them using powershell. It would be much easier for simple apps to create the roles using the portal.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  7. Make Azure AD a first class citizen of Azure

    Azure AD per say is yet a first class citizen w/i Azure. Azure ARM support is needed for pretty much all AD related features

    1) Creating updating Users, Roles, Groups, RBAC using ARM
    2) Creating Service Principals using ARM
    3) Creating automation RunAs service principals
    4) Creating Azure AD application
    5) AAD domain services
    6) MFA using ARM and Graph API
    ...

    Will AAD really become a shining example of a core-azure service someday?
    Looking forward to it...

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  8. Azure Active Directory "Default Directory" doesn't work

    Category: Azure Active Directory
    State : "Default Directory" not work.

    Explain: I had couple of directories with Azure Subscriptions.
    When I login it wasn't redirecting me to the Default Directory.

    Attached : ScreenShot

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →

    Is your ask for the portal to automatically redirect you to the directory that does have an Azure subscription rather than your company directory which in your case doesn’t have any Azure subscriptions?

    Please help us by providing as much details as you can with regards to what’s happening and what you’d like to see.

  9. Access to Azure Active Directory (Office 365 paid subscription)

    Hi,

    If you create an "Access to Azure Active Directory" subscription from your Office 365 subscription when you are logged with the wrong global admin (Office 365) then you cannot change the Account Administrator (Azure) because the subscription cannot be transferred.

    The only workaround is to log on with a different global admin and create a new Azure subscription to the same Office 365 tenant.

    It is quite confusing and the documentation below should be amended or the procedure simplified so the Azure Account Administrator can be changed or the subscription transferred.

    https://technet.microsoft.com/en-us/library/dn832618.aspx
    https://azure.microsoft.com/en-us/documentation/articles/billing-subscription-transfer/
    https://azure.microsoft.com/en-gb/documentation/articles/billing-add-change-azure-subscription-administrator/

    Thanks

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  10. Restrict access to Azure AD administration portal for each user

    I want to set the "Restrict access to Azure AD administration portal" setting (the attached file) in the Azure portal for each user, but currently it is only all users.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  11. Policy to disable inactive accounts

    We'd like a policy to automatically disable user accounts after a certain number of days of inactivity.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  12. Management of OAuth Consent Expiry Renewal

    Hi,

    OAuth2 Consent objects include an Expiry Time. Management of expiring consent stands to be a significant issue for administration, for any consent scopes/roles that require elevated permission (and especially for those of us that do not allow end-user consent).

    Please consider a feature to identify consent that will be expiring soon, and a button for admins to press to renew.

    As it stands, without running automation scripts, users will suddenly be blocked with a message that looks like the IT department has revoked their access. This is not good for our internal relationships :)

    Regards.
    Ben

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  13. Bitlocker status / keys export

    Please add the ability to view / export device bitlocker status and key. There is no easy way to tell which machines have their keys stored in AAD without manually going through hundreds of them.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  14. I got a message on this site that said a text was sent to my cell phone. It was not. I have to leave the office to check the cell phone an

    This system doesn't work because it depends on a cell phone request and the computer is in an office e where cell phones are not permitted.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  15. No puedo ingresar a mi correo

    No puedo ingresar a mi correo aun con mi contraseña y proporcionando todos los datos.
    Necesito ayuda

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  16. Add Helpdesk Information to Custom Branding Page

    Office 365 allows you to add in custom Helpdesk Information (URL/Phone #). It would be helpful if we could also apply this to our custom branding page as well, since the sign-in help field does not allow HTML, nor does it respect line breaks in the Plain Text.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  17. Under all the Security alerts, I would like to have to the ability to mark at it as working on by me.

    Under all the Security alerts, I would like to have to the ability to mark at it as working on by me.
    For Example I can right click on an alert or under the context menu and mark it as being worked on. This will allow my Co-workers the ability to move onto the next alert. This alleviate duplicate work among my team mates.

    Thank you

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  18. Make "search box" for application so that we can search on any part of the name

    When we search for an application, the search always searches for a PREFIX of the application name. It would be much more convenient to search for any part of the name.
    In addition the "all apps" and "my apps" search does more harm than good.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  19. Translation are bigger than window

    Some localized translations (for example Czech) are bigger than window to fit in. Some are also not so good at all. For example screen from branding.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  20. Merge Enterprise Applications/Application Registrations

    If I create an application in either the Enterprise Applications (EA) section or Application Registrations (AR) section, the application will appear in both, yet have a different settings and configurations (depending on the section I started with). This is extremely confusing.

    For example, if I go to an application from AR, I can only configure Properties, Reply URLs, Owners, Permissions, and Keys. When I go to the exact same application from EA, I'm able to edit the Properties again (but not all found in AR). I also get access to Users and Groups, Provisioning Application Proxy, Self-Service, Conditional Access, Permissions,…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Admin Portal  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base