Microsoft Entra External ID
GeneralEntra Id Federation Customers
In brief
The user-creation example replaces the source tenant ID with its primary domain name in the issuer value and defines the new placeholder with an example domain.
What Entra admins need to know
Administrators configuring federation can use the updated issuer example and identify the required primary domain format.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
"identities": [
{
"signInType": "federated",
"issuer": "https://login.microsoftonline.com/0/0
Replace the following values:
<entra-tenant-: The directory (tenant)idprimary-domain-name>IDprimary domain name of the source Microsoft Entra ID tenant. For example,contoso.onmicrosoft.com.<entra-external-tenant-id>: The directory (tenant) ID of the External ID tenant.<entra-tenant-user-object-id>: The object ID of the user in the source Microsoft Entra ID tenant.
@@ -109,7 +109,7 @@ Content-type: application/json "identities": [ { "signInType": "federated",- "issuer": "https://login.microsoftonline.com/<entra-tenant-id>/v2.0/<entra-external-tenant-id>",+ "issuer": "https://login.microsoftonline.com/<entra-tenant-primary-domain-name>/v2.0<entra-external-tenant-id>", "issuerAssignedId": "<entra-tenant-user-object-id>" } ]@@ -118,7 +118,7 @@ Content-type: application/json Replace the following values: -- `<entra-tenant-id>`: The directory (tenant) ID of the source Microsoft Entra ID tenant.+- `<entra-tenant-primary-domain-name>`: The directory (tenant) primary domain name of the source Microsoft Entra ID tenant. For example, `contoso.onmicrosoft.com`. - `<entra-external-tenant-id>`: The directory (tenant) ID of the External ID tenant. - `<entra-tenant-user-object-id>`: The object ID of the user in the source Microsoft Entra ID tenant.