Finance | Project Operations, Human Resources, ...

Add user from different domain on development VHD

(0) Share

Report

Posted on by MYGz

2,477

Hi,

On development VHD, Let's say I ran AdminUserProvisioning with domain1.com

Now I want to add a user from user2@domain2.com

Is it possible to directly add the user from the Users form or there's no way I can do that before first adding user2@domain2.com as a guest user in the domain1.com Azure Active Directory?

I tried adding the user manually by specifying sts.windows.net/domain2.com in the Provider field. But it didn't work.

Appreciate any tips.

Best Regards

All responses (5)

Answers (0)

Sort by

Suggested answer

Ramit Paul 22,809 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Check this blog dynamicspedia.us20.list-manage.com/.../click
André Arnaud de Cal... 307,786 Super User 2026 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi Mohammad,

Coincidentally, today I published a blog about this topic. Ramit already shared the link to this blog. He shared the link from my mailing list. You can also access the blog using the URL directly: https://dynamicspedia.com/2022/09/how-to-correctly-setup-external-or-guest-users-in-dynamics-365-fo/

You already tried to alter the Provider field in a correct way. This option works in development environments. Both hosted in the cloud as local DEV machines. Can you tell what exactly you experience when you talk about "didn't work"? What exact error do you get? What type of domain did you use? Is it an organizational or public mail account?
MYGz 2,477 on at

Like (0)

Report
Copy link

Link copied!

Hello Ramit/Andre,

Thanks for the info. This is the error I'm getting:

Sorry, but we’re having trouble signing you in.

AADSTS50020: User account 'admin.####@###.com' from identity provider 'sts.windows.net/ does not exist in tenant 'ABC Company' and cannot access the application '#######-46dd-######-895b-d07eb######08'(Dev_VHD_10.0.24) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

What I can do here is add the user user2@domain2.com in the App Registration (in the domain1.com apps) as an owner. And then retry, maybe then it will work. But I was wondering if it's possible without that step. Just entering all the required info from the user info page w/o having to deal with the AzureAD.

Thanks,
MYGz 2,477 on at

Like (0)

Report
Copy link

Link copied!

I verified that just inviting the user user2@domain2.com in the domain1.com AzureAD, the original scenario described in the question makes it work. Also no need to add the user2 as owner in the app registration.

So is it confirmed that w/o adding the user in the admin tenant AD (with which AdminUserProvisioning was done), we cannot add users in D365 FO?
André Arnaud de Cal... 307,786 Super User 2026 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi Mohammad,

Can you tell of domain2.com is a domain with a tenant Azure AD? Or is it e.g. a hotmail or gmail address? For sure, you should not add users in the app registration.

If you read my blog, then anyway it is best practice to add the user from another domain as external or guest user.