Anonymous

Thank you for your feedback! The feature team is aware of this suggestion and will keep it under consideration. There are technical challenges to overcome in order to make this happen. Please keep the votes coming if this feature matters to you.

Chen

Anonymous supported this idea · February 22, 2019

Allow the User Admin role to Enable/Disable MFA for users

932 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

180 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →

planned ·

AdminAzure AD Team (Product Manager, Microsoft Azure) responded

This feature is now on the roadmap. The MFA team is planning to adjust admin roles or create a new role that will allow delegation of MFA registration and credentials to an admin role.

Anonymous supported this idea · February 22, 2019

Add support for nested groups in Azure AD (app access and provisioning, group-based licensing)

1,371 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

155 comments · Azure Active Directory » SaaS Applications · Flag idea as inappropriate… · Admin →

started ·

AdminAzure AD Team (Product Owner, Microsoft Azure) responded

We’re continuing to investigate options for adding this support. There are technical challenges to overcome in order to make this happen. We thank you for all your valuable comments so far, and welcome any additional feedback you have on what are the most important use cases involved with these scenarios.

Anonymous supported this idea · February 22, 2019

Ability to trigger a dynamic group update

226 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

34 comments · Azure Active Directory » Groups/Dynamic groups · Flag idea as inappropriate… · Admin →

under review ·

AdminAzure AD Team (Product Manager, Microsoft Azure) responded

Our feature team is looking into options for addressing this scenario, but we do not yet have any timelines to share. For now as a workaround, you can manually trigger the reprocessing by updating the membership rule to add a whitespace at the end. We’ve also added the ability to check the membership processing status, to keep track of the status and know if processing is complete.

Anonymous supported this idea · February 22, 2019

Merge office365 and live accounts that use the same email address

1,233 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

239 comments · Azure Active Directory » End user experiences · Flag idea as inappropriate… · Admin →

started ·

AdminAzure AD Team (Product Owner, Microsoft Azure) responded

Folks,

Thanks for the questions and suggestions. And apologies for not sharing any update on this thread for so long. We’ve been working on this problem and have announced changes on our official team blog (see here: https://cloudblogs.microsoft.com/enterprisemobility/2016/09/15/cleaning-up-the-azure-ad-and-microsoft-account-overlap/).

First, we are acutely aware of the UX pain this is causing and we are sorry for this. We are trying to undo a decade and a half of systems divergence. There are literally hundreds of different engineering teams across Microsoft involved in this effort. So this is taking time.

Second, we can’t easily “merge” two accounts, or allow IT to “take over” personal Microsoft accounts. There are two main hurdles: (1) The terms of service are fundamentally different for the two account types and (2) they are based on different technologies with different stacks (different identifiers, SDKs, token formats, etc.). We’re working to converge the two stacks but again this takes time. There are details of this in the blog post linked above.

Third, in the past year we’ve worked with 70+ teams across Microsoft that operate business services but only supported MSA for historical reason. Our goal is for all of these apps to support Azure AD (work accounts) as well. As of Nov 2017, we’re about half way there. Dev Center and MSDN subscriptions (now called Visual Studio subscriptions) are example of apps that now support Azure AD. Microsoft Payment Central and Invoicing are a few weeks away. Volume Licensing and many others are in progress and a couple months away.

The best recommendations we can provide right now are:
1) Use your work account (in Azure AD) to access any work application that supports it.
2) If you had created a personal Microsoft account to access Microsoft business apps, and no longer need it, close the account. Or rename it (which means chancing the user id) to avoid confusion.

Please follow our team blog for future updates on this problem.

Ariel Gordon

Folks,

Anonymous supported this idea · January 29, 2019

Support exporting and importing conditional access policies using PowerShell

610 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

42 comments · Azure Active Directory » Conditional Access · Flag idea as inappropriate… · Admin →

started ·

AdminAzure AD Team (Product Manager, Microsoft Azure) responded

We’ll be wrapping up work soon, after making updates from feedback we’ve received so far. We should have a public date soon.

-Caleb

Anonymous supported this idea · January 18, 2019

Set an AzureAD account to expire on a specified date

461 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

51 comments · Azure Active Directory » User Creation, Deletion, and Profile Management · Flag idea as inappropriate… · Admin →

Anonymous supported this idea · January 18, 2019

Enter time of day as a condition for conditional access.

24 votes

(thinking…)

Microsoft

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

3 comments · Azure Active Directory » Conditional Access · Flag idea as inappropriate… · Admin →

Anonymous supported this idea · January 18, 2019

Give feedback

My feedback

PowerShell and Graph API support for managing Multi-Factor Authentication

Change tracking for Conditional Access Policies

Add MFA support to Secure the Windows 10 logon

Remove requirement for onprem Exchange when using DirSync

Abilty to sort Conditional Access Policies alphabetically

Enable app password creation when MFA is enforced using Azure Conditional Access

AzureAD Role Delegation to Groups

Conditional Access Support for Storage Explorer

Intune mam policies

AAD access in the mobile app

Dynamic Groups: Member of group

Allow the User Admin role to Enable/Disable MFA for users

Add support for nested groups in Azure AD (app access and provisioning, group-based licensing)

Ability to trigger a dynamic group update

Merge office365 and live accounts that use the same email address

Support exporting and importing conditional access policies using PowerShell

Set an AzureAD account to expire on a specified date

Enter time of day as a condition for conditional access.

Feedback and Knowledge Base

Searching…

Give feedback

Microsoft Azure

Your password has been reset