6

Office 365 for Education does not automatically sync user profiles with SharePoint Online. To see and edit a user profile in SharePoint Online, the user must first visit a SharePoint site. After a user visits a site, the profile will be synced to SharePoint Online during the next scheduled Office 365 directory service sync. How To Manage SharePoint Online ...


6

Managed to get it working - gist here: https://gist.github.com/zplume/e4244fb9415799a111e5062a23e22d1e I updated the Azure app's manifest.json to enable oauth2 implicit flow: "oauth2AllowImplicitFlow": true I granted the app access to "Read and write items and lists in all site collections" on behalf of the user (under delegated permissions) from the ...


4

As far as I understood your requirement, you want to fetch all users and their properties and store it into the SharePoint Online List. If this is correct, then very much this is possible. You can use Microsoft Graph API for fetching the information from AAD. The request will be like https://graph.microsoft.com/v1.0/users It will give you all users ...


3

Yes, and they show up as active (Unlicensed) users in you Admin Center [https://portal.office.com/adminportal/home#/users]. You will see them with their full e-mail address (@-sign changed to underscore _) like this: name.lastName_gmail.com#EXT#@tenantName.onmicrosoft.com So technically they are a part of Azure AD which controls authentication in you ...


3

In Graph API, you can use the below endpoint to fetch photo from Azure AD: https://graph.microsoft.com/v1.0/users/{id | userPrincipalName}/photo/$value So, for example, you have user's email address as alans@CIE493742.onmicrosoft.com, then your url will be: https://graph.microsoft.com/v1.0/users/alans@CIE493742.onmicrosoft.com/photo/$value To get this, ...


3

From my understanding it's not possible. Let me explain why. Access token holds also Id of the app, i.e. ClientId. In order to get licensing info, they are (MS) checking some internal database. I think they are using ClinetId (as well as user identity) in order to find the match. Your CliendId registered as Azure Ad app and thus license validation ...


2

If you create the user in the site collection they should exist before they log in. With so many users to add using a power shell script to add them all would probably be the best option. You can find such a script here. This includes instructions on how to deploy the script. If you add the user to the collection then the user profile will be able for the ...


2

I'm literally getting into the bad habbit of answering my own questions ffs.... Anyway, the fix is simple, you need to use the username ex : var managerField = FieldUserValue.FromUser(newItem.Manager); Where newItem.Manager is actually the username (john@something.com) -> var managerField = FieldUserValue.FromUser(...


2

You should go to the Azure portal, find appropriate app registration (you can search by App Id used for securing Azure function), then select the app by clicking on it, then Settings -> Required permissions -> Grant Permissions -> Yes:


2

In general, it's possible to use ASP.NET Core web app as add-in web for provider hosted SharePoint add-in and it's not very difficult. The main issues are TokenHelper.cs and SharePointContext.cs, which use System.Web namespace, which is not available in .NET Standard. However, it can be easily replaced with classes from .NET Standard. I've created a ...


2

If you have a custom property that you want to sync you need to look at the PnP guidance for how to sync these properties. https://github.com/SharePoint/PnP


1

The list of properties which are synchronized into SharePoint Online are outlined at Information about user profile synchronization in SharePoint Online. Any property not listed above cannot be synchronized from AD -> Azure AD -> SPO. Instead, you must set up a custom synchronization from AD/AAD -> SPO. There is a sample, Core.UserProfiles.Sync for sync'ing ...


1

To call external Web Api from SharePoint Online, make sure CORS (cross origin resource sharing) is enabled for your SharePoint Domain.


1

You certainly don't want to use a production domain for this, so yes, create a VM with AD that hosts its own domain for testing. The VM could run locally in your own data center, or spin up a server in Azure. Of course, part of the complexity of migrations comes from email, so perhaps add an exchange server to the mix as well. Again, hosted locally or in ...


1

You cannot do LDAP lookups with JS. However, with the Graph API, you can do CRUD operations on Azure AD Groups. JavaScript examples are included in the article. Active Directory groups may be synchronized with Azure AD, depending on how Azure AD Connect was configured.


1

Yes, you can take the advantage of OOTB User profile and available web parts. There are a couple of ways to get it done. you can simply use an out of the box Web Part called Contacts to manage contact information. The beauty of this approach is that you can customize your Contacts Web Part with any columns/metadata that you wish. That means you can add all ...


1

We have the same challenge with customer projects. Typically we run staging tenants with no AD sync. Instead we import users and AD groups with PowerShell scripts to the staging tenants maintaining the user name (the part before the @) so we can test permissions. The UPNs for staging users are not the same as production users. Custom Code we develop that ...


1

Microsoft has an excellent description about the supported Topologies: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-topologies#multiple-azure-ad-tenants For your situation, i see the following: One domain can only be registered to one Office365 Tenant. So you need a separate domain for your Test-Tenant which ...


1

To access your SharePoint online site from any APP using preferred technology Microsoft Graph is the best way to do that. Microsoft Graph exposes multiple APIs from Office 365 and other Microsoft cloud services through a single endpoint: https://graph.microsoft.com. You can read below article to understand and get started. Overview of Microsoft Graph API ...


1

I would say this is area which MSFT keep open. There is no way to restrict user without licensing to access the site. But it is customer responsibility to make sure that all the user who access the SPO should be assigned proper licensing. When MSFT will do the auditing on your tenant then they will come to know about it and you have to pay the price. You ...


1

You have 2 options really, use external sharing, utilizing the white listing features and share with members of those domains. If your partners already use Office 365, then they can sign in with their organizational accounts. Or you give them all their own accounts and pay for their licenses. This would be done in one of 2 ways, create them in your local AD ...


1

As per my understanding, you are asking about Single sign on (SSO) and one way to achieve that is ADFS. Configure your Office 365 as ADFS authenticated, and configure web API authenticated mode to ADFS. i have tested this in our MVC Application hosted in Azure and it is working as SSO. To configure ADFS You can check below link http://office365support.ca/...


1

You have to either choose to use the appid/secret generated in SharePoint (appregnew.aspx) OR have the app being created in Azure AD. You can't combine this into the same app. SharePoint apps are still using the old Azure ACS (Access Control Services). If you're using the Graph API, just use an Azure AD app, you can pass that auth token to the SharePoint ...


Only top voted, non community-wiki answers of a minimum length are eligible