Azure AD driver 5.1.7.300 error publish: AADSTS50034: The user account {EUII Hidden} does not exist in the xyz.onmicrosoft.com directory

Gb Gb 3 months ago

I have just installed the Azure AD driver 5.1.7.300 patch updating an existing 5.1.7.200 configuration in a test environment.

After starting the driver it was shut down again with the following error message:

publish: AADSTS50034: The user account {EUII Hidden} does not exist in the xyz.onmicrosoft.com directory. To sign into this application, the account must be added to the directory.

I couldn't find any further info on the origins of this user, I certainly don't have an EUII Hidden account and the user previously configured in the driver still exists.

I can't find others mentioning this so far, so I wonder if anyone else has encountered this?

Tags:

Azure AD Driver 5.1.7

Top Replies

0 Geoffrey Carman 3 months ago

There is a .301 patch you might want to try first.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Sebastijan Sef 3 months ago in reply to Geoffrey Carman

I see that there is .301 readme (https://www.netiq.com/documentation/identity-manager-48-drivers/AzureADDriver_5170301readme/data/AzureADDriver_5170301readme.html), but I cannot find it in downloads.

Do you see it in SLD?

Kind regards,

Sebastijan

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gb Gb 3 months ago in reply to Sebastijan Sef

thanks for the tip, I also saw an announcement about a .301 but couldn't find it in SLD
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
Suggested Answer

0 Alex McHugh 3 months ago

The EUII Hidden bit is just Microsoft trying to be secure by stripping personally identifying information from error messages.

This looks very much like an auth issue with the account/service principal that the driver shim uses to authenticate with EntraID \/AzureAD.

I believe it might be caused by configuring your account's mail address as the login user. In most environments, mail address and User Principal Name are the same. However this is not always the case.

You must use the account's User Principal Name instead. That should eliminate the error.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Menu

Identity Manager User Discussions

Azure AD driver 5.1.7.300 error publish: AADSTS50034: The user account {EUII Hidden} does not exist in the xyz.onmicrosoft.com directory

Tags:

Top Replies

Suggested Answer

Resources