Deploying user identities for Azure Active Directory user accounts
Azure Active Directory user identities are imported into One Identity Manager during synchronization. You can create additional user identities for a user account or delete them.
To enter user identities for a user account
-
In the Manager, select the Azure Active Directory > User accounts category.
-
Select the user account in the result list.
-
Select the Change main data task.
-
Next to the User identities property, click 
and enter the identities.
Syntax:
signInType=<type>;issuer=<your organization>.onmicrosoft.com;issuerAssignedId=<ID>
With:
-
signInType: Sign-in type, such as emailAddress or userName for local user accounts or federated for social network identities.
-
issuer: Issuer of the identity, Facebook for example. Local user accounts use the name of the Azure Active Directory B2C tenant's default domain, for example <your organization>.onmicrosoft.com.
-
issuerAssignedId: ID used to log in depending on the sign-in type. If the sign-in type is emailAddress, the ID must be a valid email address, if it is userName, the ID must be a valid local part of an email address, and if it is federated, the issuer expects a unique identifier of the federated account.
Example:
signInType=emailAddress;issuer=<your organization>.onmicrosoft.com;issuerAssignedId=Clara.Harris@<your domain>.com
- Save the changes.
To delete a user identity
-
In the Manager, select the Azure Active Directory > User accounts category.
-
Select the user account in the result list.
-
Select the Change main data task.
-
In the User identities menu, select the identity and click 
.
- Save the changes.
Related topics
Displaying user identities for Azure Active Directory user accounts
User identities for an Azure Active Directory user account are displayed on the user account's overview form.
To obtain an overview of all user identities of a user account
-
In the Manager, select the Azure Active Directory > User accounts category.
-
Select the user account in the result list.
-
Select the Azure Active Directory user account overview task.
The Azure Active Directory user identities form element displays the user identities of the user account.
Related topics
Displaying Azure Active Directory user identities' main data
You cannot edit the main data of an existing user identity. You can create additional user identities or delete user identities.
To display a user identity's main data
-
In the Manager, select the Azure Active Directory > User accounts > User identities category.
-
Select the user identity in the result list.
-
Select the Change main data task.
Table 33: Main data for a user identity
|
Azure Active Directory user account |
Name of the Azure Active Directory user account used by the identity. |
|
Issuer |
Issuer of the identity, Facebook for example. Local user accounts use the name of the Azure Active Directory B2C tenant's default domain, for example <your organization>.onmicrosoft.com. |
|
Assigned ID |
ID used to log in depending on sign-in type. If the sign-in type is emailAddress, the ID must be a valid email address, if it is userName the ID must be a valid local part of an email address, and if it is federated, the issuer expects a unique identifier of the federated account. |
|
Sign-in type |
Ways in which a user can sign in to the directory. For example, emailAddress or userName for local user accounts and federated for social network identities. |
Related topics
Displaying the Azure Active Directory user identity overview
Use this task to obtain an overview of the most important information about a user identity.
To obtain an overview of a user identity
-
In the Manager, select the Azure Active Directory > User accounts > User identities category.
-
Select the user identity in the result list.
-
Select the Azure Active Directory user identity overview task.
Related topics
