Skip to content

Commit 3189ea6

Browse files
Merge pull request #224454 from wtnlee/patch-3
Update user-groups-create.md
2 parents 959bfcf + aad6cad commit 3189ea6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/virtual-wan/user-groups-create.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ Before beginning, make sure you've configured a virtual WAN that uses one or mor
114114
1. Make sure all point-to-site VPN connection configurations are associated to the defaultRouteTable and propagate to the same set of route tables. This should be configured automatically if you're using portal, but if you're using REST, PowerShell or CLI, make sure all propagations and associations are set appropriately.
115115
1. If you're using the Azure VPN client, make sure the Azure VPN client installed on user devices are the latest version.
116116
1. If you're using Azure Active Directory authentication, please make sure the tenant URL input in the server configuration (`https://login.microsoftonline.com/<tenant ID>`) does **not** end in a `\`. If the URL is input to end with `\`, the Gateway will not be able to properly process Azure Active Directory user groups and all users will be assigned to the default group. To remediate, please modify the server configuration to remove the trailing `\` and modify the address pools configured on the gateway to apply the changes to the gateway. This is a known issue that will be fixed in a later relase.
117-
117+
1. If you're using Azure Active Directory authentication and you plan to invite users who are external (users who are not part of the Azure Active Directory domain configured on the VPN Gateway) to connect to the Virtual WAN Point-to-site VPN Gateway, please make sure that the user type of the external user is "Member" and not "Guest". Also, make sure that the "Name" of the user is set to the user's email address. If the user type and name of the connecting user is not set correctly as described above or you cannot set an external member to be a "Member" of your Azure Active Directory domain, that connecting user will be assigned to the default group and assigned an IP from the default IP address pool.
118118
## Next steps
119119

120120
* For more information about user groups, see [About user groups and IP address pools for P2S User VPNs](user-groups-about.md).

0 commit comments

Comments
 (0)