Answered

Azure AD login for existing Contact record with primary email address

(0) Share

Report

Posted on by PeteT21

I have users in Azure AD, and corresponding Contact records in Dynamics 365 with the same email address (Azure AD login matches Contact primary email address).

I want the Azure AD users to login to the portal, without me having to send them an invitation, or them having to register in any way; I just want them to log in using Azure AD credentials, and to be mapped to the Contact record with the same email address. Is that possible and if so what configuration is required please?

Thank you

Categories:

Security

I have the same question (0)

All responses (2)

Answers (1)

Sort by

Verified answer

Fubar 8,501 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!
There is a Site Setting:
Authentication/[Protocol]/[Provider]/AllowContactMappingWithEmail
Think its value should be set to: true (could also be True sometimes they are case sensitive)
https://learn.microsoft.com/en-us/power-apps/maker/portals/configure/configure-site-settings#portal-site-settings
(replace [protocol] and [provider] with the appropriate values - I don't have a full example for Azure AD, but it has been answered previously think it is something like Authentication/OpenIdConnect/AzureAD/AllowContactMappingWithEmail)

Was this reply helpful? Yes No
PeteT21 6 on at

Like (0)

Report
Copy link

Link copied!

Thank you so much for your help, that resolved the issue. I used "OpenIdConnect" as the [Protocol] and "AzureAD" as the [Provider] and "true" for the value of the setting. So, in all:

Authentication/OpenIdConnect/AzureAD/AllowContactMappingWithEmail = true

I also found it helpful to disable the Profile page that, by default, appears after sign-in:

Authentication/Registration/ProfileRedirectEnabled = false

Was this reply helpful? Yes No