News for hackers. Stuff that matters.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by wsjeffro on Saturday October 01, 2022 @11:10AM (#33047158)
What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft.

They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by andylynch on Saturday October 01, 2022 @01:07PM (#33048112)
They were an early mover in this area twenty years ago with the original Hailstorm / .Net Passport which was skeptically received and wasn’t helped by some spectacular outages. Google and Facebook leveraged their apps and especially GMail - Apple had the leverage from their App Store to force everyone that mattered to at their service too.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by Terretta on Saturday October 01, 2022 @06:50PM (#33050909)
Incidentally, a Microsoft Passport login still works on any site with today's "Login with Microsoft" ... and there are starting to be more along side "Login with Google" or "Login with Apple".

These days, a consumer + biz page login page can look like this:

https://www.xsplit.com/user/auth

There's almost no good reason to require emails/password rather than let users use their preferred IdP.

I think the reason it's less common is simply that indie devs assume everyone uses free Google Workspaces. This year we're seeing more Microsoft Logins. Perhaps one reason is that now Google Workspaces is no longer free and startups are realizing they can get actual Office with actual apps at the same per $6 to $12 per user cost. Then in turn, supporting that login.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by MattGaiser on Saturday October 01, 2022 @11:28AM (#33047293)
Do enough people still use consumer Microsoft accounts? Except for myself, it has been a long time since I have encountered a hotmail address or live address or outlook address in the wild.

I've gotten career advice several times to get a GMail instead, because Microsoft was considered out of date and backward (not so much anymore).

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by daveoc64 on Saturday October 01, 2022 @12:06PM (#33047601)
There are lots of very popular Microsoft services for consumers including Xbox and Office 365. Combined, these have hundreds of millions of paid subscribers.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by ekianjo on Saturday October 01, 2022 @12:15PM (#33047684)
minecraft too
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by vladvasiliu on Saturday October 01, 2022 @11:38AM (#33047376)
I'd expect this to grow now that Windows pushes more aggressively to use an MS account to login.

Plus, if this works as well as it does with the "corporate" AzureAD, it would be a better experience for users. Just "log on with your Windows account".

Not saying that's necessarily a good, thing, mind. Only that I expect support to broaden.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by hedora on Saturday October 01, 2022 @11:43AM (#33047411)
Anyone that uses Minecraft (edit: or Xbox) I'm sure it is only a matter of time until some middle manager stakes their promotion on merging it with github and/or linkedin.

Microsoft is the only company I deal with where I cannot reliably authenticate. I wish they'd just stop trying to run consumer accounts.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by easrng on Sunday October 02, 2022 @12:21AM (#33052824)
You can link your GitHub account to a Microsoft account and log in to Microsoft with your GitHub account, not sure if you can log in to GitHub with your Microsoft account tho.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by faeriechangling on Saturday October 01, 2022 @12:35PM (#33047857)
How times have changed, I mostly hear Google being called backwards now for its view that customers are just beta testers you dispose of when your latest moonshot project doesn’t hit orbit.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by quickthrower2 on Saturday October 01, 2022 @04:47PM (#33049968)
You can have a ms account but never use or know or share the ms email address associated with it
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by candiddevmike on Saturday October 01, 2022 @11:37AM (#33047370)
Microsoft's support for multiple accounts is atrocious. I can easily have 5+ Google accounts that I switch between, moving between MS accounts is awful. Additionally MS's free consumer offerings are not competitive with Gmail/Drive IMO.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by yellow_postit on Saturday October 01, 2022 @01:40PM (#33048384)
I'm not a fan of Google's solution either. With a device with multiple G accounts it’s always a guessing game when opening up a google doc which account it’ll choose.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by GordonS on Saturday October 01, 2022 @12:10PM (#33047638)
It's even worse if you have personal and business accounts tied to the same email address - you never know which one you're using, or which you need.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by logifail on Saturday October 01, 2022 @12:19PM (#33047717)
> It's even worse if you have personal and business accounts tied to the same email address - you never know which one you're using, or which you need

I have a friend who managed to do get into this mess, and he's still not sure how he did it.

[email protected] is apparently linked to two separate identities at Microsoft, one is a business account, one is a "personal" account.

Every time he experiences any kind of login issue, this bites him :/

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by trevorishere on Saturday October 01, 2022 @01:27PM (#33048264)
This is a legacy setup that can no longer be created. Microsoft removed the option to use a custom domain for Microsoft accounts many years ago, but hasn't forced people to change.

However, your friend can get out of this scenario by following the instructions on this site:

https://support.microsoft.com/en-us/account-billing/change-t...

They'll end up with <whatever_they_can_find>@outlook.com for their Microsoft account. When using Org services via a browser, you'll automatically use your Org account. When using consumer services, you'll automatically use your Microsoft account (assuming you've selected stay sign-in for both).

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by logifail on Sunday October 02, 2022 @01:53AM (#33053244)
> This is a legacy setup that can no longer be created

Thank goodness for that!

> However, your friend can get out of this scenario by following the instructions on this site

Thanks for the tip, will try and walk him through this next time I'm with him.

> hey'll end up with <whatever_they_can_find>@outlook.com for their Microsoft account

I doubt they actually need/want access to the Microsoft account. They don't use this work email address for any consumer services, as far as I'm aware -although how could one tell what services it could be associated with?

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by trevorishere on Sunday October 02, 2022 @12:31PM (#33057466)
They can find connected apps for their consumer account on https://account.live.com/consent/manage.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by magicalhippo on Saturday October 01, 2022 @12:22PM (#33047744)
I read an explanation from some Microsoft page or rep. that it had to do with making personal purchases in the Windows Store when you're signed in using your business account. IIRC the rationale was that the personal account could persist beyond your employment, so you wouldn't lose any purchases if you switched jobs.

If I indeed recall correctly, then that doesn't really make sense. Just force people to make a different, actual personal account, and have them use that.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by logifail on Sunday October 02, 2022 @01:54AM (#33053250)
> IIRC the rationale was that the personal account could persist beyond your employment, so you wouldn't lose any purchases if you switched jobs

Except if you lose access to the work email address by switching jobs, surely you're one forgotten password away from permantently losing access to the personal account too? It's linked to your _work_ email (only)...

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by magicalhippo on Sunday October 02, 2022 @10:47AM (#33056301)
Yeah... all I can recall was it never made much sense to me.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by magicalhippo on Saturday October 01, 2022 @12:20PM (#33047723)
Indeed. I've never understood this distinction. Either it's a business account, or it's a personal account. It's bad enough that people use their business mail to sign up for personal stuff, we don't need Microsoft to make it even worse.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by trevorishere on Saturday October 01, 2022 @01:28PM (#33048278)
> we don't need Microsoft to make it even worse.

Microsoft made it better by preventing the scenario from occurring beginning 3 - 5 years ago.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by nine_k on Saturday October 01, 2022 @12:19PM (#33047722)
This is a terrible idea to begin with.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by rwalle on Saturday October 01, 2022 @06:59PM (#33050978)
There is an obvious reason.

Facebook and Google provide "Sign-in with Facebook/Google account" not because they do it out of goodwill, to only make it "easier" or "smoother" to login -- it obviously cost resources on their end to enable such features -- it helps them better identify users and then serve ads. And Google can be really aggressive -- try reddit or Quora.

Apple, on the other hand, tries to sell "login with Apple account" with a different approach: they advertise the "privacy" part of it and how you can hide your email address by using it's sign-in service. And they have a term where login with Apple must be enabled on an app and website if a company has an app on the app store and it supports any other third-party login. In other words, if Reddit supports login with Google on iPhone, it must also support login with Apple ID. This helped the adoption a lot.

For Microsoft, they are relatively late and small in the ad business (for now) so I guess they don't really care about getting more of your information via sign-in services. And they are not on this privacy bandwagon as Apple does. So they really have no incentive for this.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by pid-1 on Saturday October 01, 2022 @02:22PM (#33048729)
Only very recently Windows started requiring a MS account. I'd guess most people who don't own a Xbox don't have a MS account.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by rejectfinite on Saturday October 01, 2022 @04:05PM (#33049562)
Every hotmail and outlook email is an MS account...
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by quickthrower2 on Saturday October 01, 2022 @04:45PM (#33049947)
I was forced to use one to set up my new laptop
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by thakoppno on Saturday October 01, 2022 @01:44PM (#33048402)
In the US at least it seems like we’re at the stage where every new account created is essentially tied back to a social security number.

One cannot get an e-mail address without a phone. One cannot get a phone without a credit check. A credit check requires a social security number.

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by DanAtC on Saturday October 01, 2022 @02:10PM (#33048609)
Prepaid phones are readily available in the US, no ID or SSN required.
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by Gh0stRAT on Saturday October 01, 2022 @03:05PM (#33049086)
Prepaid phones all-too-often can't be used for SMS/phone authentication. Banks in particular seem to dislike them.

(when it doesn't work, you'll usually get an error message about the number not being supported or words to that effect)

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by aflag on Saturday October 01, 2022 @03:18PM (#33049196)
Isn't every github account also a microsoft account? There are plenty sites there integrating with github login.