Chat now with support
Chat with Support

On Demand Migration Current - Active Directory User Guide

How-To

The following Quick Start Guides have been created to assist with common directory sync scenarios.

Guest User How-Tos

How do I prevent Guest Users from being sent an Invitation during creation?  

To prevent an invitation being sent when a Guest user is created, modify the default mappings for the property named SendInvitationMessage to be False before creating your Guest users.

Follow these steps to complete this task:

  1. From the landing page or the application menu, choose Directory Synchronization
  2. Open the left navigation menu

  3. Select Templates under Setup

    Figure 2: Navigate to Templates

    Figure 2: Navigate to Templates

  4. Locate the template to be modified
  5. Select the template then click Settings
  6. Navigate to the Mapping tab
  7. Search for the attribute SendInvitationMessage

  8. Double click the resulting record to open for editing

    Figure 3: Example Search within Template Mapping Tab

    Figure 3: Example Search within Template Mapping Tab

  9. Once open, click Advanced

  10. Modify the default value of “True” to be “False”

    Figure 4: Example of Advanced Mapping used to prevent Guest Invitations from being sent

    Figure 4: Example of Advanced Mapping used to prevent Guest Invitations from being sent

  11. Click Save
  12. Once saved you may navigate out of Templates to your next destination

 

How do I create local users, so they are ready to be synchronized up to Microsoft Entra ID as a Guest?  

Once you have decided on the local on-premises attribute to be used for this purpose, then it is simply a matter of setting that attribute mapping to set a value of “Guest” for the appropriate set of users.

The following provides a simple example template mapping using ExtensionAttribute1 as the designated local attribute to be set as “Guest” for Microsoft Entra Connect to sync them up to Microsoft Entra ID as B2B accounts.

  1. From the landing page or the application menu, choose Directory Synchronization
  2. Open the left navigation menu

  3. Select Templates under Setup

    Figure 5: Navigate to Templates

    Figure 5: Navigate to Templates

  4. Locate the template to be modified
  5. Select the template then click Settings
  6. Navigate to the Mapping tab
  7. Search for the attribute ExtensionAttribute1
  8. Double click the resulting record to open for editing
  9. Once open, click Advanced
  10. Modify the value to be “Guest”

  11. Set the Condition to Action = “create” if you wish to only apply this rule to new users

    Figure 6: Example of Advanced Mapping used to create local users, so they are ready to be synchronized up to Azure AD as a Guest

    Figure 6: Example of Advanced Mapping used to create local users, so they are ready to be synchronized up to Microsoft Entra ID as a Guest

  12. Select User as the Target Object Type
  13. Click Save
  14. Once saved you may navigate out of Templates to your next destination

 

When you run your workflow to create your local users with the above mappings and Microsoft Entra Connect is configured to sync as B2B users. This is only one example, there are different methods that be used to provide the same result depending on your environment needs.

Please note: If you choose this approach, you must ensure that the designated attribute is populated with the correct value (Guest or Member) for all existing user objects in on-premises Active Directory that are synchronized to Microsoft Entra ID before enabling synchronization of the “UserType” attribute.

For details on How to enable synchronization of UserType for Microsoft Entra Connect then please read this Microsoft document.

 

How do I ensure my Guest Users are visible in the Global Address Lists (GAL)?  

By default, guests aren't visible in the Exchange Global Address List.

If you have already created your Guest Users manually or otherwise, you may run a few PowerShell commands to set the appropriate property. Here’s how to Add guests to the global address list.

If you are using Directory Sync to create and update your Guest Users, then use the steps listed below to make sure your guests are visible in the global address list.

To ensure the Guest user is visible in the GAL, modify the default mappings for the property named HiddenFromAddressListsEnabled to be False before creating or synchronizing your Guest users.

The default mapping for HiddenFromAddressListsEnabled is to synchronize the source user object visibility property to the same in the target. If this is not the desired behavior, then follow these steps to guarantee the user will be visible.

Follow these steps to complete the task:

  1. From the landing page or the application menu, choose Directory Synchronization
  2. Open the left navigation menu

  3. Select Templates under Setup

    Figure 5: Navigate to Templates

    Figure 7: Navigate to Templates

  4. Locate the template to be modified
  5. Select the template then click Settings

  6. Navigate to the Mapping tab

    Figure 8: Example Search within Template Mapping Tab (click t enlarge)

  7. Search for the attribute HiddenFromAddressListsEnabled
  8. Locate the mapping where the Target Object Type is User
  9. Double click the resulting record to open for editing
  10. Once open, click Advanced

  11. Modify the value to be “false”

    Figure 9: Example of Advanced Mapping used to ensure a Guest User is visible in the GAL

  12. Optionally you may set a condition action ("create", "update", or "delete") whereby the object is only acted upon when the condition is satisfied
  13. Click Save
  14. Once saved you may navigate out of Templates to your next destination

 

Additional Information  

Guest Users in Directory Sync

How-To

The following Quick Start Guides have been created to assist with common directory sync scenarios.

Active Directory

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating