Global Administrator, Application Administrator, or Cloud Application Administrator role is required.
Home Realm Discovery (HRD) policy - Use this option to enable the feature for the entire tenant. There are two options for configuring the feature:. The feature supports managed authentication with Password Hash Sync (PHS) or Pass-Through Authentication (PTA). If the non-UPN email in use becomes stale (no longer belongs to the user), these claims will return the UPN instead. When a user signs in with a non-UPN email, the unique_name and preferred_username claims (if present) in the ID token will return the non-UPN email. More on how this applies to Azure AD business-to-business (B2B) collaboration in the B2B section. The feature enables sign-in with ProxyAddresses, in addition to UPN, for cloud-authenticated Azure AD users. The feature is available in Azure AD Free edition and higher. Here's what you need to know about email as an alternate login ID: To access an application or service, users would sign in to Azure AD using their non-UPN email, such as article shows you how to enable and use email as an alternate login ID. For example, if Contoso rebranded to Fabrikam, rather than continuing to sign in with the legacy UPN, email as an alternate login ID can be used. To move toward hybrid authentication, you can configure Azure AD to let users sign in with their email as an alternate login ID. Due to business or compliance reasons, the organization doesn't want to use the on-premises UPN to sign in to Azure AD. 
Changing the Azure AD UPN creates a mismatch between on-premises and Azure AD environments that could cause problems with certain applications and services.By default, the Azure AD User Principal Name (UPN) is set to the same value as the on-premises UPN.Some organizations haven't moved to hybrid authentication for the following reasons:
With this approach, known as hybrid authentication, users only need to remember one set of credentials. Many organizations want to let users sign in to Azure Active Directory (Azure AD) using the same credentials as their on-premises directory environment. For more information about previews, see Supplemental Terms of Use for Microsoft Azure Previews. Sign-in to Azure AD with email as an alternate login ID is a public preview feature of Azure Active Directory.
0 kommentar(er)
