Connect your Azure DevOps organization to Azure AD Clarification

Question

Hello,

Question regarding https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/connect-organization-to-azure-ad?view=vsts&tabs=new-nav

If I have an MSA Account in VSTS (e.g. [e-mail]).

In Azure AD (the AD I want to connect) I have an AD Account with same email address ([e-mail]) and a Guest/Member (MSA) account also with same email address. Will that be an issue?

Because I have the impression (but not clear) I should only have one account in Azure AD with that email address for a succesfull connection setup?

Answer 1

Yes if you have an account that exist with VSTS which was created previously with a MSA Account. Then you can connect this to Azure ad through the Azure Devops organization.

Answer 2

That I know. But what if I have an MSA Account and an AD Account in Azure AD with same email address. And then I connect Azure Dev Ops to Azure AD. Will there be a problem for the MSA Account that existed in Dev Ops.

So in DevOps => [e-mail] MSA

In Azure AD => [e-mail] MSA and [e-mail] AD

Will there be an issue? I want to know if that would work or should only one user with email address exist in Azure AD?

Thanks

Hannes

Answer 3

In Azure AD => [e-mail] MSA (Guest) and [e-mail] AD (Member).What is the directory role being assigned to these users. The directory role may differentiate these two users. But it is always better to avoid confusion by keeping a single account.