With the usual configuration of Office 365 and Azure, there might be multiple Azure AD (AAD) instances associated with your subscription. When creating registrations to whatever SharePoint-related apps that you might be using, if you create the registration to the wrong Azure AD, it can’t access the data in your SharePoint. Or at least without further configurations, it probably won’t get any data from your Office Graph API or whatever else you might want to use.
How to find the instance of Azure AD associated with your SharePoint Online
It’s simple, luckily! This guide will show you how to select the right AAD instance. It’s geared towards a case where you’re actually wanting to register a new app to your AAD, or if you’re planning to use an enterprise application. The last step (4.) handles that part.
So – don’t start by browsing to portal.azure.com. That’ll just let you access the Azure AD instace(s) associated with your Azure subscription – not your SharePoint Online tenant. Instead, follow these steps:
- Go to portal.office.com and choose Admin to access the administration portal. Note that you need to sign in as the global administrator (or some other role with sufficient access to the portal).
- Then make sure you are signed-in in the right tenant! Each SharePoint tenant has an Azure AD associated to it, and that instance is where we want to do the registration. Select “Azure AD” from the “Admin Centers” -section on the bottom left.
- If need be – choose the correct instance of AAD by selecting your account in the top right corner of the page. Since it’s a tenant-specific AAD instance, it should look something like this.
Yes – it’s fairly barebones. It’s not supposed to offer many services – it’s just used for your SharePoint Online tenant and facilitating access there!
- The next step depends on if you’re editing Enterprise Application (4.1) or Azure AD instance -specific app registration (4.2.)
- Select Enterprise Applications > All Applications from the left.
- Select More Services > App Registrations.
- The registrations there are fairly straightforward, so you should be good now! If you’re creating an app registration, just remember to configure the reply-urls with all possible different options 🙂
Credits and references
I got this tip from a coworker at Valo-team. Cool stuff!
Latest posts by Antti K. Koskela (see all)
- Speaking at SPS Twin Cities! - April 9, 2018
- Opening a web part page in maintenance mode - March 27, 2018
- Troubleshooting: Anonymous access on a public SharePoint site collection failing - March 22, 2018