Reputation: 307
I have got an application registered on Azure portal which I can use to Single Sign on with my company email account. But it doesn't work if I use personal Microsoft account. Is it possible to enable single sign on for personal microsoft accounts? If so, how?
Upvotes: 2
Views: 2322
Reputation: 7728
Are you only looking to be able to sign onto the account, or are you requiring admin access for the Microsoft account?
If you are just looking to sign on, using the Microsoft account should not be an issue. If you have not done so already, you need to add the user accounts (and Microsoft email) to the tenant. This is under Active Directory > Enterprise Applications > Click into the application > Users and Groups > + Add User > + Invite. You need to specifically invite these users as guest users who can log into the application.
This documentation explains where to do this: https://github.com/Azure-Samples/active-directory-dotnet-webapp-openidconnect
Upvotes: 6
Reputation: 7394
Apps created on portal.azure.com connect to the Azure AD v1 endpoint, which works with organizational users (and guests of organizations) exclusively. If your app needs to work with both work&school accounts and personal accounts, please consider integrating with the Azure AD v2 endpoint. More info at http://aka.ms/aaddevv2
Upvotes: 4