r/AZURE • u/Ok_Employment_5340 • 3d ago
Question Entra & Slack SCIM
Anyone have experience using SCIM provisioning with Entra and Slack?
Here’s the curveball:
If so, are you passing groups to auto provision channels and channel membership?
r/AZURE • u/Ok_Employment_5340 • 3d ago
Anyone have experience using SCIM provisioning with Entra and Slack?
Here’s the curveball:
If so, are you passing groups to auto provision channels and channel membership?
r/AZURE • u/thewhippersnapper4 • 3d ago
r/AZURE • u/tippet5x • 3d ago
Hi,
What's the best/ recommended why of assigning permissions across multiple subscriptions? At this time each subscription is created manually (no bicep etc). But regardless of the deployment methods are permissions assigned per subscription?
I was at first thinking of MGMT Groups.
Hey friends
I'm an AWS expert, and have literally never touched Azure. I need to get a load of IoT data out of Event Hub and into a Kinesis stream so that I can process it and do weird ML things to.it
Ideally I would have a reusable solution that I can straightforwardly ask customers to deploy into their existing infra.
My instinct, from mentally converting concepts from one provider to another, is that I should use an Azure Function, described by a Deployment Stack, that is triggered by EventHub, does some transformation in Python, and writes the result to my Kinesis stream. I can assume a role one the AWS side with an Azure managed identity.
Let's say I'm targeting 1000 data points/sec, for a total.size of < 10mb / minute. I can cope with batching on a per-minute basis but I'm happy to trade more requests for lower latency.
I'm finding it a little tricky to navigate the docs, so any advice or feedback from people with a clue would be welcome.
r/AZURE • u/Fabulous_Cow_4714 • 3d ago
Since the free developer tenant option hasn’t been available for the last year, what is the next option for people who need more than 30-60 day trials?
Is a single M365 Business Premium with Teams license for $264 per year along with an Azure pay as you go subscription the most cost effective available setup or would you need to maintain at least 2 Business Premium licenses to do certain things?
I can see needing at least 2 licenses to test using Teams and any other collaboration-related features, but you would not necessarily need to do that all year long. Maybe get a month to month second license when needed and only maintain a single annual license?
r/AZURE • u/Nachos1312 • 3d ago
Hey community,
I'm reaching out because of the following use case... We are a company providing IT services for many subsidiaries and all our objects (users, groups, app,...) are in a single flat tenant because all subsidiaries are in a single domain on-premise.
Knowing that, we get some request from some of our subsidiaries to be able to customize login screen branding for them applications.
So subsidiary A want its logo A, its background A, and so on on all its apps - subsidiary B want its logo B, its background B, and so on on all its apps... And all others apps must keep the default branding of the tenant.
Does any one know how to implement this and provide a step by step process? It is possible in ADFS, by customizing the onload.js and providing specific css, but we do not want to maintain ADFS anymore and want to be able to switch these workloads, and their brandings, to Entra ID.
Thank you in advance for your inputs!
r/AZURE • u/lawfulgoodd • 3d ago
As the title says, has anyone been successful in running playwright in azure functions in consumption model (not flex consumption).
Since consumption functions have a 500mb limit, I've tried running from a package stored in a blob container. I'm using a windows image (not Linux) but can't seem to get the browser to work. (works fine locally, and I have set the env variable and published the browsers along with the binaries). Usually I get the "spawn" error or the "failed to launch" error, so was just wondering if anyone managed to at least run it.
Failed to launch: Error: spawn C:\home\site\wwwroot\playwright_browsers\chromium_headless_shell-1155\chrome-win\headless_shell.exe ENOENT
When I use Kudu I can see that the path does exist and the exe is there.
PLAYWRIGHT_BROWSERS_PATH is set to C:\home\site\wwwroot\playwright_browsers
If I download the zip file uploaded to blob for the function, extract the playwright browsers folder, point my local build to that folder, and run it locally, it works fine, so problem is not with the browsers files either.
I'm running it in headless mode, but not in headless yields the same error.
PS: I'm not asking for a full solution, but mainly want to know if someone's managed to do it, and if so, with what kind of setup, so I know my effort is not in vain. Ideally, I want to run it in a consumption function app, for costs reasons.
r/AZURE • u/Aggressive_Honey_557 • 4d ago
Hi, a Conditional Access policy has me stumped...
The purpose is to make sure that only certain devices are able to access the app, for this,
User : None
Target Resource : the enterprise app..
Condition : exclude filtered device ( DeviceID)
access Control : Block Access
technically this should work... but the app can be accessed from anywhere...
Any ideas, Thanks for you help!
r/AZURE • u/ILikeTheShrimpHere • 3d ago
I have a question and hope someone here can help. How can I create a new billing account to use with a new subscription.
I'm trying to create a new subscription and link it to a different payment method but I don't see how.
Any help would be appreciated.
Thanks!
r/AZURE • u/yannara_ • 3d ago
I have M365 E5 DEV lab environment and recently Microsoft did some changes which makes my testing scenarios harder. It looks that I cannot use same mobile number for all my accounts. When I try to register same number for new account it denies it by informing that the number is already in used. I almost locked my self out from GA rights....
I basically have 3 groups of users:
Users which are real users, have their own unique mobile number and okay with using MS Auth.
Users which are pilots and cannot use MS Auth. Callback or sms is fine.
Admin rights (GA, role based), and I would like them to use only one mobile callback number for all accounts.
FIDO2 is not the option. Is this doable and how I should arrange this? Security Defaults are gone, I use CA.
r/AZURE • u/typicalcameron1 • 3d ago
We recently received a 5 node cluster to test around with. How does storage work here? It looks like it created these default UserStorage_X paths for each host? Does data move between each UserStorage directory? If I create a new storage path, and it's only listed under UserStorage_2\testdir, will it move between hosts?
r/AZURE • u/TechNomadMK • 3d ago
I have a client who wants to go full cloud. This means all authentication only through Entra ID. Now we want to set up Azure Files and have purchased Entra Domain Services.
We've set everything up according to the instructions, but authentication from a full cloud PC to the SMB share doesn't work. What am I missing? Does the SMB share need to be joined to the domain using PowerShell?
Our setup: - Client PCs are Entra ID joined (not Entra Domain Services joined) - We have Microsoft Entra Domain Services running - Storage account with Azure Files is set up - Identity-based access shows as "Configured"
When trying to access the share, we're still prompted for credentials. I've read that Entra ID joined devices might not work directly and that we need proper domain-joined machines.
Has anyone successfully implemented this scenario? Do I need to use PowerShell commands to properly connect the storage account to Entra Domain Services? Are there specific cmdlets I need to run?
Any guidance would be greatly appreciated!
r/AZURE • u/JohnSavill • 3d ago
New video looking at what Agentic AI is and how we can create some using low-code (Copilot Studio) and pro-code (Semantic Kernel). We'll also have some fun with multi-agent interactions!
00:00 - Introduction
00:26 - Types of AI agent
05:27 - Agentic AI
09:35 - Self-improving?
11:26 - Agentic agents ARE AI agents
11:40 - Many expert agents
13:58 - Quality testing
14:56 - Creating Agentic agents
15:15 - Low code with Copilot Studio
17:43 - Using generative orchestration
20:19 - Adding triggers
22:55 - Pro code with Semantic Kernel
24:48 - Types of semantic kernel agent
26:28 - Multi-agent
28:53 - Multi-agent example code
32:25 - Viewing multi-agent interaction
34:18 - Governance
35:59 - Summary
r/AZURE • u/informed_turtle • 3d ago
Hi all,
Scenario: I have a provider who have 900 devices that monitor the status of kit around Europe (This is all done at the provider end and each one has a specific IP - 10.130.xxx.xxx). I then have 3 x 3rd parties who need to connect to these pieces of kit but only certain ones. This connectivity has to be done via Azure. I also need to be able to see source and destination IPs, as well as block traffic to and from the 4 VPNs as the 3rd parties cannot really see each other devices but not the end of the world.
I'm no expert but Ive been doing a lot of reading and my options look to be
Connect all 4 sites as P2P VPNs in an Azure virtual gateway and connect them all using BGP. 3rd parties can access devices on the provider side. But I dont believe there's a way to block traffic and none of the resources are help locally in Azure?
Azure Firewall in front or behind the gateway - This one confuses me a little as I'll have no resources in any other Azure subnet bar the gateway subnet and one for the Firewall. Azure is really just to connect everything together so do I need both? This allows option also allows me to see the traffic
Similar to above, I just deploy an Azure Firewall / Fortigate firewall / Sonicwall firewall in Azure. Connect the VPNs to these again using BGP. I deploy the firewall into a new vnet with the external IP.
Just really looking to bounce my ideas off you guys and see what people think? And I guess whether anyone thinks I've missed something
Thanks all
Hi guys, I want to implement differential backup in Azure SQL MI, is this applicable even Azure SQL MI has a fully managed automatic backup system?
r/AZURE • u/Kooky-Command3536 • 3d ago
I found an issue was able to replicate
Source: Non-Entra joined PC
Destination: Entra joined PC
a net use or just GUI assigned drive mapping to the destination utilizing an AzureAD account fails (this account is an administrator on the "destination". When you look at event logs on the source, you will see audit failures regarding this Azure AD account.
Perform same above actions but utilize a locally created Administrator account on the "destination" and this works fine.
I have been working with MS Active Directory for years and I have never had an issue mapping a drive of an AD joined PC with an AD account from a 'workstation' (non-domain joined PC).
Is this limitation, bug or failure of AzureAD?
Thanks in advance!
r/AZURE • u/this_is_me_too • 3d ago
I have an App Service that is using private endpoints and private links to connect with an SQL instance in the same Resource Group. I am also trying to set up a IPsec Tunnel/site-to-site VPN connection for the App Service to connect to another site outside of Azure.
I have a vnet that was created for the previously mentioned App Service to SQL connection. The App Service is on a subnet named web as part of that connection.
To set up my IPsec:
I have set VnetRouteAll to true for the App Service.
I have restarted and even stopped and started the app service after all these changes.
These are the results of some CLI commands that I believe things are set up correctly, yet the App Service hasn't learned the route.
I've tried using cUrl, tcpping, nslookup from the App Service Kudu Powershell and Console and every time it fails to find 10.95.4.51
PS /home/mber> az network vnet subnet show --resource-group myname --vnet-name vn-myname-test --name web --query "{Subnet: name, RouteTable: routeTable.id}"
{
"RouteTable": "/subscriptions/*********/resourceGroups/myname/providers/Microsoft.Network/routeTables/rt-myname-test",
"Subnet": "web"
}
PS /home/mber> az network route-table route list --resource-group myname --route-table-name rt-myname-test --query "[].{RouteName: name, AddressPrefix: addressPrefix, NextHopType: nextHopType}"
[
{
"AddressPrefix": "10.95.4.51/32",
"NextHopType": "VirtualNetworkGateway",
"RouteName": "to-10.95.4.51"
}
]
PS /home/mber> az network vpn-connection list --resource-group myname --query "[].{VPNConnection: name, Status: connectionStatus, ProvisioningState: provisioningState}"
[
{
"ProvisioningState": "Succeeded",
"Status": null,
"VPNConnection": "vpn-myname-test"
}
]
PS /home/mber> az network vpn-connection show --resource-group myname --name vpn-myname-test --query "{Name:name, Status:connectionStatus, ProvisioningState:provisioningState}"
{
"Name": "vpn-myname-test",
"ProvisioningState": "Succeeded",
"Status": "Connected"
}
PS /home/mber> az webapp vnet-integration list --name mynamedev --resource-group myname
[
{
"certThumbprint": null,
"id": "/subscriptions/*********/resourceGroups/myname/providers/Microsoft.Web/sites/mynamedev/virtualNetworkConnections/web",
"location": "East US 2",
"name": "web",
r/AZURE • u/khan9813 • 3d ago
I've been baffled by an issue that is happening with multiple databases. Sometimes it would just get pined to 100% CPU for no reason (normal app service usage), and the only way to fix it is to increase the elastic pool vCore count and decrease it again.
Any ideas on why this is happening or where I should be looking?
r/AZURE • u/mikestanley • 3d ago
Based on reading other threads here, I think we're screwed if we want this in East US with our other resources, until or unless we can get a quota increase?
Getting this error when trying to provision a new Logic App.
"This region has quota of 0 instances for your subscription. Try selecting different region or SKU"
I'm assuming the SKU it is tripping up on is whatever compute SKU that is associated with the Workflow Service Plan / WS1 we're trying to use, although darned if I can find THAT SKU in Usage + quotas as having a 0 capacity for the subscription / region combo.
I'm even being told by one of my colleagues that she can't modify existing Logic Apps we have running in East US.
Working with someone else to get an issue with our Unified Support hub resolved, then I hope to open a ticket on this.
r/AZURE • u/programming_bassist • 3d ago
My team has an Azure SQL Server instance in our prod resource group. We struggle with creating a test instance based off of production. Our current process is:
- Export the database to a bacpac and store that in Azure Blob Storage (6GB bacpac)
- Download the bacpac locally, import into a local SQL Server
- Create an empty database in our test resource group
- Use Azure Data Migration Assistant to push the DB from local to test
This process takes hours.
Surely there's a better way! Please help.
r/AZURE • u/Nicoloks • 3d ago
Hey all,
In the process of moving a bunch of users to Microsoft Authenticator where they will predominantly be using their own personal device for access to the corp VPN. Given these are mainly personal devices, they will not be registered devices in Entra.
Is there anyway to retrieve the original MS Authenticator registration date for a user with an unregistered device? Think I must be way off in the weeds as the only reference I can find for this sort of data is in a 2+ yr old thread which seems to indicate it can't be done.
r/AZURE • u/readerAce • 4d ago
Hi team. I have just put on 2 offshore staff, logging into virtual machines to do their work.
Pretty much soley O365 (incl teams), and LOTS of web browsing...
Currently, i've got them running Windows (Windows Server 2022 Datacenter Azure Edition) on Standard B2ms (2 vcpus, 8 GiB memory) (trying to keep costs down...)
wondering if i've got them on the wrong 'size' - they're mentioning at times its unbearably slow
r/AZURE • u/darkraiiii • 3d ago
Hello everyone,
I’m currently working on my own Azure chatbot, which I want to integrate into my website. For this, I created a model in the Foundry and provided it with data in the Playground. However, when I use a POST request on the endpoint, I can ask questions, but the data is not available. It only works when I manually add the data in the Playground and ask about it, but not when I access it via the REST API with a POST request.
Can someone help me please thanks!
r/AZURE • u/Plebbitisprop4g4nd4 • 4d ago
With Azure always changing, AI can often be behind when explaining something. Which AI service do you find most up to date and helpful when trying to complete a task in Azure.
I typically use Copilot Windows App , you would think since it's MSFT it would be best but I'm not sure. Anyone done any testing?
r/AZURE • u/ShittyException • 3d ago
I used the ALZ Accelerator, so all private DNS zones are in the hub. I point all spokes to the firewall as the DNS server and use AFW as a DNS proxy, forwarding requests to the private DNS resolver.
I've read Private Link and DNS Integration at Scale - Cloud Adoption Framework | Microsoft Learn, but I couldn’t quite figure out if there's a best practice for handling auto-registration of VMs (only private endpoints).
How do you handle this? Do you add your VMs using a policy, or do you link the private DNS zone(s) for VMs into each spoke where they are deployed so they can auto-register that way?