Skip to content

Commit 486e8b9

Browse files
Update cross-tenant-synchronization-configure.md
1 parent bd202e8 commit 486e8b9

File tree

1 file changed

+50
-0
lines changed

1 file changed

+50
-0
lines changed

articles/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure.md

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -481,6 +481,56 @@ Currently, there isn't a way to delete a configuration on the **Configurations**
481481

482482
:::image type="content" source="./media/cross-tenant-synchronization-configure/enterprise-applications-configuration-delete.png" alt-text="Screenshot of the Enterprise applications Properties page showing how to delete a configuration." lightbox="./media/cross-tenant-synchronization-configure/enterprise-applications-configuration-delete.png":::
483483

484+
#### Symptom - Users skipped due to presence of altSecId
485+
486+
487+
**Cause**
488+
489+
If SMS sign-in is enabled for a user, they will be skipped by the provisioning service.
490+
491+
**Solution**
492+
```
493+
##### Disable SMS Sign-in options for the users
494+
495+
#### Import module
496+
Install-Module Microsoft.Graph.Users.Actions
497+
Install-Module Microsoft.Graph.Identity.SignIns
498+
Import-Module Microsoft.Graph.Users.Actions
499+
500+
Connect-MgGraph -Scopes "User.Read.All", "Group.ReadWrite.All", "UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"
501+
502+
503+
##### The value for phoneAuthenticationMethodId is 3179e48a-750b-4051-897c-87b9720928f7
504+
505+
$phoneAuthenticationMethodId = "3179e48a-750b-4051-897c-87b9720928f7"
506+
507+
#### Get the User Details
508+
509+
$userId = "objectid_of_the_user_in_Azure_AD"
510+
511+
#### validate the value for SmsSignInState
512+
513+
$smssignin = Get-MgUserAuthenticationPhoneMethod -UserId $userId
514+
515+
{
516+
if($smssignin.SmsSignInState -eq "ready"){
517+
#### Disable Sms Sign-In for the user is set to ready
518+
519+
Disable-MgUserAuthenticationPhoneMethodSmSign -UserId $userId -PhoneAuthenticationMethodId $phoneAuthenticationMethodId
520+
Write-Host "SMS sign-in disabled for the user" -ForegroundColor Green
521+
}
522+
else{
523+
Write-Host "SMS sign-in status not set or found for the user " -ForegroundColor Yellow
524+
}
525+
526+
}
527+
528+
529+
530+
##### End the script
531+
```
532+
533+
484534
## Next steps
485535

486536
- [Tutorial: Reporting on automatic user account provisioning](../app-provisioning/check-status-user-account-provisioning.md)

0 commit comments

Comments
 (0)