This is an error I see pop up in various discussions forums every now and then and tracking it down can be somewhat difficult. I had this happen recently in a scenario that I think probably is or will be one of the more common scenarios so I figured I'd write it up here. In…
How To Delete An App You Consented to in Azure AD
In many ways this is a companion piece to the post I just published on solving an issue with multi-tenant applications in Azure AD: "The Account Needs to be Added as an External User in the Tenant with Azure AD Apps". This is actually a question I see come up fairly frequently, and one that…
Bug Alert for April CU and Migrating Users
Just heard about a nasty little bug in the April CU from my friend Syed. He was using the SPWebApplication.MigrateUsers method to migrate accounts from one claim value to another (i.e. like if you were migrating from Windows claims to SAML claims, or in his case, changing identity claim values). Turns out after doing the…
Using Azure AD as an Identity Provider with ADFS for SharePoint 2013
I had someone ask me about this topic a couple times in the last few weeks so I decided it was time to spin up another blog post. The question is about how you can connect your on premises SharePoint farm to Azure Active Directory (AAD) using ADFS. Now I had blogged about how to…
Why I’m Leaving Microsoft…and Starting SamlMan
As I’m sure some of you noticed last week, I switched over all of my blogs from the former Share-n-Dipity site on TechNet to the new Share-n-Dipity site here on WordPress.Com. While there’s obvious aesthetic advantages to doing that (long time readers I’m sure know exactly how much I hated the formatting on the old…
Using Roles in Azure Applications
I was spending some time today (finally) looking at how to get what I really consider the baseline functionality of claims – apps, users and roles – all working together with one of my Azure AD apps. Azure has been pushing out pieces of an RBAC-based infrastructure for a few months now, and I wanted…
Do You Know When Your Office365 Tenant Is Down…Because Now You Can (for free)
As you all know, I have worked extensively with customers who run On-Premise servers and those on their journey to the Cloud. The promise of the Cloud is real but I have seen many enterprises struggle with the complexity of this transformation. Challenges include security, compliance, loss of control, lack of visibility etc. A frustrating…
How to Fix the OpenId Access Denied When User Won’t Grant Rights at Login
Okay, so the title may not be the clearest thing ever here today, but it’s tough to do in just a few words, so let me explain the scenario a little more fully. Suppose you create an ASP.NET application and you configure it to be secured by Azure Active Directory. When you do that you…
How Office365Mon’s Free Services Got Me a Refund on my SharePoint Online Bill
One of the original goals I always had for Office365Mon was the hope that at some point it should be able to monitor enough outages to qualify me for a refund on my Office 365 monthly charges. For those of you who aren’t familiar, Office 365 has a guaranteed uptime service level agreement (SLA) of…
Office365Mon – The First Month in Review
Today is a special day for Office365Mon. We have been live for exactly one month. You all have been an important part of this month. We’re pretty proud of what we’ve accomplished and we are very grateful for your support. We wanted to give you a recap of the last month and update on what’s ahead….