Azure Active Directory

Welcome to the Azure Active Directory suggestions and feedback site! We love hearing from you. If you have suggestions, please submit an idea or vote up an idea. We are monitoring the site actively.

Thank you for joining our community and helping improve Azure AD!

Wehave a new log in experience integrated with Azure AD, and we stronglyrecommend you log in with your Azure AD (Office 365) account. If yourUserVoice account is the same email address as your Azure AD account, yourprevious activities will be automatically mapped to your Azure AD account.  You can read more here for details: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Putting-customers-first-for-f...

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. MSAL

    Please add an option to disable auth broker/authenticator app on MSAL for iOS.
    Currently it will redirect to the app and I have certain logic I need to maintain on the server side and I cannot do it with the broker.

    If I remove the schemes from LSApplicationQueriesSchemes it will not init the MSAL.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  2. How to recover same device?

    Einfach mal beschreiben, wie man eine Wiederherstellung/ Aktualisierung aus dem Backup auf dem Gerät einspielt.

    Keep it simple....

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  3. Change your 2 step verivication from every 24 hours to every 30 days.

    Change your 2 step verification from every 24 hours to every 30 days.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  4. Support for MAM applications for Microsoft Enterprise SSO plug-in for Apple devices

    Microsoft Enterprise SSO plug-in for Apple devices should work for MAM.
    Globally half our mobiles are BYOD - this feature needs to support MAM not just MDM.
    Thanks

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  5. no escucho la persona que me llama al teléfono

    no logro escuchar la tecla que debo apretar en el teléfono para confirmar

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  6. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  7. Allow me to turn OFF my 2FA as I cannot access my account...

    invest in usability studies - FYI I can't access my eMail right now because of this

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  8. Not able to reset my student account

    Not able to access my student account. Not able to update the phone #

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  9. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  10. For CVR Two-factor authentication there needs to be an option for using a secondary email address for receiving verification codes

    For CVR Two-factor authentication there needs to be an option for using a secondary email address for receiving verification codes

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  11. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  12. Microsoft Authenticator on my Android fails to setup account with QR code

    MFA fails miserably with MS Authenticator failing to setup new account after scanning QR code

    Why cant you let azure AD users to use simple SMS sending confirmation codes instead

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  13. Update the combined MFA/SSPR Registration's to not be dependent on 3rd-party cookies

    Apple has enabled Prevent Cross-site Tracking by default in iOS 13.4. As noted in the article, users get a "Sorry, we can't sign you in" message when 3rd-party cookies are blocked. As a result, MFA/SSPR Registration is broken by default on iOS 13.4. A manual intervention is now required to allow 3rd-party cookies because the setting cannot be managed on a supervised device. Apple has provided prescriptive direction on how update apps. Please update the combined MFA/SSPR Registration's to not be dependent on 3rd-party cookies.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  14. Integrate Eidas (eu wide government login for eu citizens) into azure ad

    Since eu offers a eu wide login service for almost all eu citizens a better integration with azure ad could make azure ad more easy to use for many people.

    Examples could be

    use eu login additional / instead of mfa
    Onboard new employees by eu login retrieving their base masterdata.
    ....

    https://webgate.ec.europa.eu/cas/login?loginRequestId=ECAS_LR-18107929-Jzq2R5ivb0rSdzHNrcLnURNKXozRgMADBrjg1OjiePJP7gkzWbEE0ZfzKOs8H7fj08brFVNEHmOrxm7zGNYXh9XG-jpJZscgsw0K6XyjCM9qinm-NAMXk3llCCzWtNc4etQOJkJGIVSlzetVJb7gvd7DwBkACF2GWc2T5OwINsBKEWwJk8DCzaTQpEZ4lhtDTxr8VjW

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  15. AAD - Azure Key Vault integration

    We have a certificate generated by Azure Key Vault and it will auto rotate. and we use the same certificate for the AAD App authentication by uploading the .cer to AAD portal.
    However, once the certificate is auto rotated, the thumbprint will be changed, and the AAD App authentication to AAD will fail because it use the latest version of certificate generated by Azure Key Vault.

    Is it possible to implement a feature rather than upload a cert, just point to the Azure Key vault certificate, once there is a new version generated, AAD should whitelist the new cert version,…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  16. By joining our community

    developer experiences and condition access

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  17. webauthn

    Please support webauthn properly. I have 6 different authenticator apps already, and Yubikeys, why are you forcing me to use MS Authenticator app? Worse, your Yubikey preview feature requires Windows 10, which makes no sense at all since webauthn works on all platforms. This is like pre-Satya days of Microsoft attempted forced-lockin, and its in the worst possible part of the ecosystem where it will hinder the world moving to universal secure authentication protocols.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  18. I can't sign in because 2FA only offers codes to mobile apps I don't have.

    My iPhone crashed into the floor, shattering the screen, rendering it completely non-functional. After the repair, the iPhone required a restoration which did not restore my Microsoft Authenticator data. Now when I try to sign in as the sole admin for my O365 Business tenant, it tries to send the code to the old iPhone that can't receive it. I'm completely locked out of my account, and have had to move my O365 email accounts for my users to a temporary MX provider because I can't manage or pay for my services, but the domain is already registered with this…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  19. Make Enterprise Apps searchable by Reply URL

    We have a ton of SSO'ed apps. If an app is misspelled/mislabeled during creation, the vendor changes product names, or you have multiple similar apps with the same company it can be very difficult to identify the appropriate enterprise app. I think it would be very helpful if we could also search by reply URL.

    I love the new Enterprise Apps experience. You guys rock - thanks for being awesome!

    6 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  20. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base