In a scenario where you develop multiple Native Applications and use Azure AD as Identity Provider, it would be useful to have a way to obtain a sort of SSO even if those native applications use ROPC.

For example, if i develop App1 and App2 and both apps are installed on the same device and configured for the same AAD tenant, if i use ROPC to obtain an idtoken or accesstoken in App1, it would be useful to be able to retrieve another token on App2 without entering credentials.

Maybe exposing an API from the Authenticator broker?

Azure AD should provide more parameters to configure as per the users need.
For example as per my organisation's Security policy, the minimum password length required is 12. But there is no way to configure this parameter from 8.
The Azure AD platform should provide the ability for users to configure the below password policy at least.
1. Password history
2. Password complexity of temporary password generated by Azure
3. Password length

I'm blown away by the lack of options once your account gets locked out by the Azure AD Smart Lockout feature. Not having the ability to monitor the account lockout duration or have the option to unlock an account using this feature is insane.

New access panel (https://myapplications.microsoft.com) can customize display icons by workspace owner only.
Unfortunately, end users want to customize it like browsers' favorites.
So would you like to create personal workspace and can edit anybody?

Add customized filtering in the AzureAD user overview like on the new Office365 user overview. Filtering should include AD attributes like department, position, usage location etc.

If a users gets locked out of their account in Azure AD Domain services there is no way to unlock it. The user has to wait for 30 minutes.
Try telling the CEO you can't unlock her account?

a user can see work and mobile number in webmail-->my account page. but when the user logs into myprofile.microsoft.com, only work number is shown and not the mobile number. we are unsure where this myprofile.microsoft.com syncs the data from.

The taskbar settings work with Enterprise State Roaming, they roam between different computers, but not the pinned apps. When users work at different computers, the roaming of pinned apps would be the most valuable part of a roaming taskbar.

When adding guest users via Bulk Invite in Azure AD, the name field is populated with the prefix of the email address. Frequently it's not the person's real name. I'll have to go back and modify them all. Please advise when this functionality will be added to Azure AD.

PLEASE HELP IN BIOLOGICAL WAR IN CHINA.

It would great to have the ability to allow Mac OS X users with the ability to join Azure AD.

It would be great if the connected network printers would also roam between different computers with Enterprise State Roaming.
They roam with UE-V. But if you combine UE-V with Enterprise State Roaming (what is the recommended solution of Microsoft) you loose the possibility of roaming network printers.

We're very happy that with Enterprise State Roaming we've got a solution to roam different settings from Edge browser, specially the favorites. But for a good end user experience it would be necessary that also the possibility to set a specific page as the homepage and other settings like the preferred search engine in the address bar would roam between different computers.

Used verification, 3 times!!, and it wouldn't accept. Then it wanted me to change my password. No, I just wanted to look up my schedule at home. WAY TOO MUCH WORK especially for my day off.

when we create a group on azure active directory we add members in it but when the number increases and we need to track a user . it becomes a very tedious task as we dont have the option to search the user or sort them .