Microsoft Entra ID in Profile: FAQ

faq quick links after setting up a microsoft entra id account, will my local profile account credentials remain functional so i will be able to sign in with it? docid\ bcqmjgnoca mmuinnxwjqas an administrator, can i enforce all users in my organization to only use microsoft entra id to log into profile? docid\ bcqmjgnoca mmuinnxwjqis it possible for two profile local accounts to share the same microsoft entra id account? docid\ bcqmjgnoca mmuinnxwjqwhat are the best practices for sharing a workstation with a colleague while using microsoft entra id with profile? docid\ bcqmjgnoca mmuinnxwjqwhat happens when a local profile user account is locked out (due to many failed login attempts), but they try to sign in via microsoft entra id sso? docid\ bcqmjgnoca mmuinnxwjqwhat audit records does profile maintain for login activity through microsoft entra id? docid\ bcqmjgnoca mmuinnxwjqwhat mfa (multi factor authentication) options are available with microsoft entra id? docid\ bcqmjgnoca mmuinnxwjqcan we still use the profile session 'lock' function to temporarily restrict access on an active profile session? docid\ bcqmjgnoca mmuinnxwjqwhat happens when i reach the specified period of inactivity, and my profile session gets locked? docid\ bcqmjgnoca mmuinnxwjqhow can we access profile if microsoft entra id is unavailable? docid\ bcqmjgnoca mmuinnxwjq after setting up a microsoft entra id account, will my local profile account credentials remain functional so i will be able to sign in with it? yes, your local profile account credentials will still work as long as you know the correct username and password as an administrator, can i enforce all users in my organization to only use microsoft entra id to log into profile? yes, you can enforce this first, ensure that all users are fully configured for microsoft entra id second, reset their local passwords in profile and withhold the new passwords from them third, make sure to uncheck \[show “i forgot my password” link] in profile preferences > security tab to prevent the user from resetting their local password as a result, this will prevent users from signing in with local accounts, effectively requiring them to log in with microsoft entra id is it possible for two profile local accounts to share the same microsoft entra id account? no, it is not possible to assign the same microsoft entra id account to two different profile accounts the profile system will not allow this each profile account must be linked to a unique microsoft entra id account to ensure proper authentication and account management what are the best practices for sharing a workstation with a colleague while using microsoft entra id with profile? each profile user should have their own individual windows session on the shared workstation this ensures that their microsoft entra id credentials, profile settings, and associated data remain secure and isolated what happens when a local profile user account is locked out (due to many failed login attempts), but they try to sign in via microsoft entra id sso? profile will block the login attempt and display an error message, even if the microsoft entra id account is active and correctly configured what audit records does profile maintain for login activity through microsoft entra id? the following events are documented in profile audit table failed login for sso microsoft entra id enabled but microsoft entra id user account not configured properly in profile successful login for sso microsoft entra id enabled and microsoft entra id user account configured properly any failed login attempts at the microsoft entra id layer will be handled by microsoft entra id’s audit system (for example user entered an incorrect password for microsoft entra id authentication) what mfa (multi factor authentication) options are available with microsoft entra id? microsoft entra id offers a range of mfa options, including the microsoft authenticator app, sms and voice calling mfa features like passwordless authentication and conditional access may be included in your subscription we encourage you to verify what’s available with your current license can we still use the profile session 'lock' function to temporarily restrict access on an active profile session? we recommend locking your windows session instead of using the profile 'lock' function locking the windows session ensures that access to the entire system is secured, preventing unauthorized users from accessing profile what happens when i reach the specified period of inactivity, and my profile session gets locked? resuming your profile session will not require you to reauthenticate with profile if you wish to securely lock a session after a specified period of inactivity, we recommend enforcing this through locking the windows session instead how can we access profile if microsoft entra id is unavailable? profile local accounts will remain functional assuming users know their local profile password, to access profile without microsoft entra id, they can follow these steps users access the profile shortcut without the sso parameter, which will direct them to the traditional login screen users enter their profile local account credentials at the traditional login screen learn more click on the following links to read more about ms entra id in profile microsoft entra id in profile docid 7vbbydxhicv4cig1vbcwdhow to configure the profile application in microsoft entra id tenant docid\ ahjpd7hipdmpnmykgkhd7how to add single sign on ms entra id license in profile docid\ wikaaadvi80fasetqmukvhow to configure single sign on (sso) for microsoft entra id in profile docid 1zwbi7njedkcjkbfmnpyzhow to configure existing users for single sign on (sso) with microsoft entra id in profile docid\ dx0y5tybx qkq2rohi0z how to add new users to profile for single sign on (sso) with microsoft entra id in profile docid\ infkwtp01gthumhdrkb2nhow to prevent users from using microsoft entra id single sign on (sso) as a login method docid\ z9bjonex05g1ui4jolqbkhow to enforce users to only use single sign on (sso) microsoft entra id as a login method docid\ dvj52aqrmntx m09ucstuhow to configure a profile user's application shortcut to use single sign on (sso) (microsoft entra id) login method docid\ s0 sfcmduo3b2oqe2f9jf