Skip to content

Commit cce8927

Browse files
Revise AzureADAuthorizationEndpointUri values and tips
Updated authorization endpoint URIs for Exchange Online PowerShell environments and added a tip for using /organization.
1 parent 185be84 commit cce8927

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

exchange/exchange-ps/ExchangePowerShell/Connect-ExchangeOnline.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -145,11 +145,13 @@ Accept wildcard characters: False
145145
146146
The AzureADAuthorizationEndpointUri parameter specifies the Microsoft Entra Authorization endpoint that can issue OAuth2 access tokens. The following Exchange Online PowerShell environments and related values are supported:
147147
148-
- Microsoft 365 or Microsoft 365 GCC: Don't use this parameter. The required value is `https://login.microsoftonline.com/common`, but that's also the default value, so you don't need to use this parameter.
149-
- Office 365 Germany: `https://login.microsoftonline.de/common`
150-
- Microsoft 365 GCC High or Microsoft 365 DoD: `https://login.microsoftonline.us/common`
148+
- Microsoft 365 or Microsoft 365 GCC: Don't use this parameter. The required value is `https://login.microsoftonline.com/organization` or `https://login.microsoftonline.com/common`, but that's also the default value, so you don't need to use this parameter.
149+
- Office 365 Germany: `https://login.microsoftonline.de/organization` or `https://login.microsoftonline.de/common`
150+
- Microsoft 365 GCC High or Microsoft 365 DoD: `https://login.microsoftonline.us/organization` or `https://login.microsoftonline.us/common`
151151

152-
If you use the UserPrincipalName parameter, you don't need to use the AzureADAuthorizationEndpointUri parameter for MFA or federated users in environments that normally require it (UserPrincipalName or AzureADAuthorizationEndpointUri is required; OK to use both).
152+
If you use the UserPrincipalName parameter, you don't need to use the AzureADAuthorizationEndpointUri parameter for MFA or federated users in environments that normally require it (UserPrincipalName or AzureADAuthorizationEndpointUri is required; OK to use both).
153+
154+
**Tip** : Using /organization ensures that only work or school accounts are allowed. Users will not be prompted to choose between consumer and organizational accounts. This is recommended for enterprise scenarios where consumer accounts should be excluded.
153155

154156
**Note**: MFA authentication or federated authentication isn't available in Office 365 operated by 21Vianet.
155157

0 commit comments

Comments
 (0)