Friday, 25 April 2025

1. Select the **Workspace** at the top left corner.

1. In a different web browser window, sign in to your ArcGIS Online company site as an administrator


1. In a different web browser window, sign in to your Meraki Dashboard company site as an administrator

In the left browser, drill down to **config** > **authsettingsV2**.


1. In another browser window, sign on to your [Small Improvements](https://small-improvements.com) company site as an administrator.



In addition to using the Microsoft Entra join process, you can also manually elevate a regular user to become a local administrator on one specific device. This step requires you to already be a member of the local administrators group.

1. In a different web browser window, sign in to your Clebex company site as an administrator

1. Sign on to your Coupa company site as an administrator.

1. Sign in to your **Egnyte** company site as administrator.

1. In a web browser window, sign into your FM:Systems company site as an administrator.

2. Select **Workspace**.

1. In a different web browser window, sign in to your IntelligenceBank company site as an administrator.

1. Go to Setup.


1. In a different web browser window, sign into Leadfamly website as an administrator.

License consumption and utilization can still be viewed in the Microsoft 365 Admin Center under **Billing** > **Licenses**.

1. In a different web browser window, sign into Looker Analytics Platform website as an administrator.


1. In the **Role** tab, select **Storage Blob Data Contributor** role from the dropdown and then select **Next**.

1. In a different web browser window, sign in to your Panorama9 company site as an administrator.

1. In a different web browser window, sign in to Podbean as an Administrator.

1. Sign in to your Rally Software tenant.

1. In a web browser window, sign into your Replicon company site as an administrator.

1. In a different web browser window, sign in to your up Slack company site as an administrator


1. Sign in to your **TeamSeer** company site as an administrator.

1. In a different web browser window, sign into your TimeOffManager company site as an administrator.

1. Sign on to your **TOPdesk - Public** company site as administrator.

1. Sign on to your **TOPdesk - Secure** company site as administrator.

1. In a different browser window, sign on to your WhosOnLocation company site as administrator.

1. In a different web browser window, log in to your Sprinklr company site as an administrator.

1. In a different web browser window, log into your Gigya company site as an administrator.

1. Log in to the SolarWinds Orion and go to the **Settings** > **All Settings**.

1. In a different web browser window, sign in to your SumoLogic company site as an administrator.

1. Log in to your Check Point Harmony Connect website as an administrator.

1. Log in to your Documo website as an administrator.

1. Log in to ecFreight2 Application as an administrator.

1. Log in to iSAMS as an Administrator.

1. Log in to your Teamgo website as an administrator.

1. Log in to your Tulip instance as an Account Owner.

1. Log in to the VeraSMART as an administrator.

1. Log in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Administrator](https://go.microsoft.com/fwlink/?linkid=2247823).

1. Sign in to [Eletive](https://app.eletive.com/). Navigate to **Settings** > **Features**.

1. Log in to [Microsoft Entra admin center](https://entra.microsoft.com) with at least [Application Administrator](https://go.microsoft.com/fwlink/?linkid=2247823) login credentials.

1. Access the GitHub repository [`entra-id-inbound-provisioning`](https://github.com/AzureAD/entra-id-inbound-provisioning).

1. In the **Provisioning** tab, set the **Provisioning Status** to **On**.

1. Log in to [BrowserStack](https://www.browserstack.com/users/sign_in) as a user with **Owner** permissions.

1. Log in to Clebex HUB.

1. Log in to your [H5mag environment](https://account.h5mag.com/login) and navigate to **[Account](https://account.h5mag.com/account)** > **[Provisioning & SSO](https://account.h5mag.com/account/provisioning)**.

1. Sign in to the Proware application by navigating to `https://www.metaware.nl/Proware`.

To retrieve more attributes, follow the steps listed:

1. In the **Provisioning** tab, set the **Provisioning Status** to **On**.

Organizations can also integrate NPS with Microsoft Entra multifactor authentication to enhance security and provide a high level of compliance. This helps ensure that users establish two-step verification to sign in to the Remote Desktop Gateway. For users to be granted access, they must provide their username/password combination along with information that the user has in their control. This information must be trusted and not easily duplicated, such as a cell phone number, landline number, application on a mobile device, and so on. RDG currently supports phone call and **Approve**/**Deny** push notifications from Microsoft authenticator app methods for 2FA. For more information about supported authentication methods, see the section [Determine which authentication methods your users can use](howto-mfa-nps-extension.md#determine-which-authentication-methods-your-users-can-use).

The **Conditional Access** tab of the event details shows you which policy triggered the MFA prompt.

1. Browse to **Identity** > **Settings**.

The hybrid reporting agent, used to send a MIM Service event log to Microsoft Entra to surface in password reset and self-service group management reports, is deprecated. The recommended replacement is to use Azure Arc to send the event logs to Azure Monitor. For more information, see: [Microsoft Identity Manager 2016 reporting with Azure Monitor](/microsoft-identity-manager/mim-azure-monitor-reporting).

**Type:** New feature

To aid in troubleshooting protocol tracking related errors, we’ve added a new property called **original transfer method** to the **activity details** section of the Conditional Access **sign-in logs**. This property displays the protocol tracking state of the request in question. For example, for a session in which device code flow was performed previously the **original transfer method** is set to **Device code flow**.

author: jenniferf-skc

1. In a different web browser window, sign in to Brightidea using the administrator credentials.

Once you update your application management policy, you can confirm that it's applied by reading the default application management policy again as [shown earlier](#read-your-tenant-application-management-policy). The response should show the updated policy with the restrictions you applied.

1. Log in to your Standard for Success K-12 company site as an administrator with superuser access.

Navigate to **Microsoft Entra ID** > **Sign-ins** on the [[Microsoft Entra admin center](https://entra.microsoft.com)](https://portal.azure.com/) and click a specific user's sign-in activity. Look for the **SIGN-IN ERROR CODE** field. Map the value of that field to a failure reason and resolution using the following table:

| AADSTS50048 | SubjectMismatchesIssuer - Subject mismatches Issuer claim in the client assertion. Contact the tenant admin. |

1. The Microsoft Entra provisioning service queries the ECMA Connector Host to see if the user exists. It uses the **matching attribute** as the filter. This attribute is defined in the Microsoft Entra admin center under Enterprise applications -> On-premises provisioning -> provisioning -> attribute matching. It's denoted by the 1 for matching precedence.

**Ensure that every app has at least one Conditional Access policy applied**. From a security perspective it's better to create a policy that encompasses **All resources (formerly 'All cloud apps')**. This practice ensures you don't need to update Conditional Access policies every time you onboard a new application.

1. Sign in to the Windows server where the Provisioning Agent is installed.

This article describes how to work with lifecycle workflows using Security Copilot in the Microsoft Entra admin center. Using this feature requires [Microsoft Entra ID Governance licenses](/entra/id-governance/identity-governance-overview#license-requirements).

Learn how to enable Multi-Geo Capability for Microsoft Entra Private Access to optimize traffic flow from Microsoft Entra Clients to Microsoft Entra Apps.

This configuration registers an app in Microsoft Entra ID that represents the external API client and grants it permission to invoke the inbound provisioning API. The service principal client ID and client secret can be used in the OAuth client credentials grant flow.

1. [Install a private network connector](how-to-configure-connectors.md) in a private network that has outbound connectivity to the destination web application. A good option is to host the connector in an Azure Virtual Network where you control the outbound egress IP. We recommend that you install two or more connectors for resiliency and high availability.

> When you sign up for the Netskope ATP preview, you are implicitly signing up for the TLS preview.

1. Click **Review + create**, then **Create**.