No result in people picker if guest filter is enabled

[staehelir]

We use SharePoint Foundation 2013 with the newest AzureCP version. We add a second Azure AD to the AzureCP and want to filter out guest accounts. When we enable guest filter, then the people picker can't find any account from the second Azure AD. After disable the guest account filter, then the people picker shows all account from the second Azure AD.

[Yvand]

Can you validate if the configuration of the AAD tenants is the one you expect using the script below:

Add-Type -AssemblyName "AzureCP, Version=1.0.0.0, Culture=neutral, PublicKeyToken=65dc6b5903b51636"
$config = [azurecp.AzureCPConfig]::GetConfiguration("AzureCPConfig")
$config.AzureTenants

Can you confirm if it is AzureCP 17?

[NaveenKanukuntla]

@Yvand : I do have the same issue. I do not seem to get any results if 'filter guest users' is selected when configuring my Azure Connection.

[Yvand]

Ok, I was waiting for @staehelir to send more data but it looks like an actual bug, I will repro it soon and let you know the result

[Yvand]

I tested with 2 tenants, 1 has ExcludeGuests set to true and the other to false:

Add-Type -AssemblyName "AzureCP, Version=1.0.0.0, Culture=neutral, PublicKeyToken=65dc6b5903b51636"
$config = [azurecp.AzureCPConfig]::GetConfiguration("AzureCPConfig")
$config.AzureTenants[0].ExcludeGuests=$true
$config.AzureTenants[1].ExcludeGuests=$false
$config.Update()

It all works as expected: guest accounts of AzureTenants[0] are filtered out and both members and guests are shown in AzureTenants[1].
@NaveenKanukuntla @staehelir am I missing something?

[NaveenKanukuntla]

@Yvand : I think I now understand what is going wrong.

When we add a Tenant, we have a choice to select 'Filter our Guest Users' on the configuration screen

So, when I configure like above and perform a search, the below is what I get.

But, when I configure the connection without selecting the 'Filter out Guest users on this tenant' and use PowerShell to update the filter attribute it works.

Identifier                  : xxxx
Name                        : xxxx
ApplicationId               : xxxx
ApplicationSecret           : xxxx
ExcludeMembers              : False
ExcludeGuests               : True
ClientCertificatePrivateKey : 
AuthenticationMode          : ClientSecret
GraphService                : 
UserFilter                  : 
GroupFilter                 : 
UserSelect                  : 
GroupSelect                 : 
UpgradedPersistedProperties : {}

So, if I do it through UI it does not work, but with PowerShell it does. Now, I do not know if the update made through PowerShell is really working, since I do not have any guest users in my tenant.

Interestingly, that does not reflect on the configuration page, even though it does show in my PowerShell result.

I will add some guest users and see. But for now, this is what I found out.

[Yvand]

@NaveenKanukuntla thank you for the details, it pointed me directly to the problem, it's really a dump issue: I set property ExcludeMembers instead of ExcludeGuests when the option was set in the new AAD tenant dialog...
It's fixed in 229c14d

[NaveenKanukuntla]

@Yvand : Great. Let me know when the latest version is out and I will test it for you.

[staehelir]

@Yvand @NaveenKanukuntla thank you. It works over PowerShell!

[Yvand]

@NaveenKanukuntla I just published the pre-release, here is the link: https://github.com/Yvand/AzureCP/releases/tag/19.0.20201207.1262
Thanks!

[vargasfe]

Hello Yvan, I just installed release 1262 and I am still unable to get AzureAD groups in people picker. None of the groups: Security, Microsoft 365, Distribution show up in people picker. I’ve uninstalled, installed, reset configuration, etc. and groups are not returned. Please help… Fernando From: Yvan Duhamel <notifications@github.com> Sent: Monday, December 7, 2020 10:50 AM To: Yvand/AzureCP <AzureCP@noreply.github.com> Cc: Subscribed <subscribed@noreply.github.com> Subject: Re: [Yvand/AzureCP] No result in people picker if guest filter is enabled (#107) @NaveenKanukuntla <https://github.com/NaveenKanukuntla> I just published the pre-release, here is the link: https://github.com/Yvand/AzureCP/releases/tag/19.0.20201207.1262 Thanks! — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#107 (comment)> , or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACUI3YAPCQBHABUVC2J3HELSTT2TFANCNFSM4TZWK4RA> . <https://github.com/notifications/beacon/ACUI3YAQGXDPYSNF4AFB5BDSTT2TFA5CNFSM4TZWK4RKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOFQNY2TA.gif>

[Yvand]

@vargasfe this bug is for the guest accounts filter, please open a separate issue for your scenario that is different.
Thanks

[Yvand]

@NaveenKanukuntla were you able to test the release?

[NaveenKanukuntla]

@Yvand : The issue is now resolved with the latest release. Thank you very much.