Azure Active Directory

Welcome to the Azure Active Directory suggestions and feedback site! We love hearing from you. If you have suggestions, please submit an idea or vote up an idea. We are monitoring the site actively.

Thank you for joining our community and helping improve Azure AD!

Wehave a new log in experience integrated with Azure AD, and we stronglyrecommend you log in with your Azure AD (Office 365) account. If yourUserVoice account is the same email address as your Azure AD account, yourprevious activities will be automatically mapped to your Azure AD account.  You can read more here for details: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Putting-customers-first-for-f...

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add support for more Regular Expressions as part of the SAML

    With the claims that are being issued currently it is immposible to accomplish things like stripping leading 0 values from an attribute. As an example if the EmployeeID field holds 001234 then I could use Extract After Matching set to 0 and it would return 1234 as expected, but if that come across the employeeID of 120345 then the result is 345 rather than 120345.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  2. Add support for Chrome OS

    We need users access Exchange only from Android and iOS. In Conditional Access rule, "Any device" is selected and grant access only if user access from "Approved Client App". But users are able to access email from Outlook in Chrome OS. As per Microsoft, neither conditional access nor Approve app support Chrome OS. So users are able to access emails from Chrome OS.

    Can Chrome OS support be added as part of Conditional Access rule? This is a major security threat for us as we are finance.organization.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  3. Dynamics System Admin managed by PIM

    Add the System Admin role from Dynamics to be a role that can be managed by PIM.
    Currently the Dynamics 365 Service Admin isn't fit for purpose as you still have to be granted System Admin rights by a GA to properly use the role. Either expand this role so it is automatically a System admin in the Dynamics instances or make the System admin role manageable by PIM

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  4. Allow encryption of ADFS SAML claims to AAD, using self-owned certificate.

    I would like the SAML claims sent from O365 RP encrypted by a self-owned certificate. The problem I see is that there is no way for AAD to decrypt the claim. Please when can this feature be supported?

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  5. Descriptive error message when reached redirect limit URLs

    The current error message when I exceed more than 20 redirect URLs is misleading and doesn't tell the real problem.

    A message saying "You reached the limit of allowed redirect URLs of 20." would be more informative.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    need-feedback  ·  0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  6. Multiple accounts on AWS integration with Azure AD

    The article for AWS integration with Azure AD doesn't talk about adding a couple of attribute manually to map the role and provider roles in AWS.

    https://blog.flux7.com/aws-best-practice-azure-ad-saml-authentication-configuration-for-aws-console

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  7. O.S as SaaS

    I know Microsoft is giving current O.S as a per license purchased or with device,but this is limited to windows machines.Now a days multiple O.S platforms are released and not all of them... so hoping to get subscription for O.S and can be assessed as Azure content and save all my work required from any OS, without installation using parallels or Boot Camp.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  8. Update instructions to integrate sales force

    Customer reported instructions to integrated salesforce must be updated.

    Hi Andres,

    I was able to resolve the issue earlier today. In addition to the URL, there were three things that had to be done:

    In Salesforce, the SAML identity type must be set to Federation ID.
    In Salesforce, the Azure username must be placed in the Federation ID field.
    In the Azure application, in the Single Sign On settings, a claim must be added with the name FederationIdentifier with a value of user.userprincipalname.

    The MS support case may be closed, but I would suggest an update to the instructions. From…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  9. Please create Application tutorial for user provisioning in bluejeans network accounts

    Please create Application tutorial for user provisioning in bluejeans network accounts

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  10. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  11. Providing compliance information about gallery apps(e.g. HIPPA / PCI compliance)

    e.g. HIPPA compliance status, PCI compliance status, etc.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  12. Can the default sync interval from Azure AD to the SaaS application which is 20 mins, be modified? If yes, how?

    The default user identity sync interval between Azure AD and SaaS app (example: salesforce) is 20 mins. This default value should be modifiable.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  13. Need a way to provide group memberships during account provisioning

    We have created a custom app with no SSO and only account provisioning enabled. We have implemented a web service exposing SCIM (2.0) endpoints Our web service gets the users and groups. But the user objects are missing 'groups' SCIM attribute (memberof). And while the group objects have the attribute 'members', it is empty.

    We need a way to get group memberships of users.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  14. SaaS Account Provisioning Activity report is not record

    SaaS Account Provisioning Activity report is not record for BOX
    But Sales Force is Recorded completely.
    Google is not record this report.

    I hope the common specifications of the report
    This log is important for support to solve the problem of provisioning

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  15. We should already be investigating, but you may also use the feedback button below to send us a report of the mishap.

    SAML attribute customization and Provisioning of the attributes on user

    I am working on Saas application from gallery to integrate with Azure AD. The attributes tab under all the Saas application provides very few parameter by default like UPN, firstname, lastname, mail alone. Also "provisioning" option under "Attributes" consist of limited parameter.
    I have manually configured additional parameters for an Saas app where we need telephone number, fax, home phone etc. which we have synced and was working for few days and started receiving following error. We should already be investigating, but you may also use the feedback button below…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
  16. Yardi

    Azure SSO does not include Yardi property management ERP. We have several clients who use this online

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SaaS Applications  ·  Flag idea as inappropriate…  ·  Admin →
1 2 4 Next →
  • Don't see your idea?

Feedback and Knowledge Base