Country-Targeted Bookmarks in Microsoft Search are not working - search

I configured bookmarks in Microsoft Search and specified a country as I want my bookmark to point to country-specific content. The problem is they are not working. Can anyone try/confirm?
How does Microsoft correlate user<->country? I.e. how does Microsoft search algorithms know that this user is from that country?
Physical IP address? Browser locale/language settings? AAD properties? Country of license assigned?

Microsoft fixed it recently. They implemented “Use Azure AD locations” flag when you select country.
If you use “Use Azure AD locations” flag - the bookmark will only appear for users with Azure AD locations that match selected countries or regions.
If cleared, the user’s IP address will be used to determine location.
Microsoft 365 Search country-targeted bookmarks: new “Use Azure AD locations” flag

Targeting country in Microsoft search bookmarks works only when
Microsoft Search is integrated with Bing
Client configured his Country/Region in Bing and use Bing to search
Credit: Country-Targeted bookmarks in Microsoft Search: make it work

Related

PowerBI - Service Principal access

Trying to publish report in PowerBI using Service account. These are steps I did. I'm starting to learn this, so please correct me if I did anything wrong.
Created Microsoft 365 account, as Power BI wont take personal email to sign up.
Signed up for Power BI, activated pro account.
Need to invoke REST method, so I signed in using same Microsoft 365 account to Azure. With this account, when I try to add subscription, its taking me to page to select offers for subscription.
I have another Azure subscription, but I'm not able to change directory of Azure account I created with Microsoft 365, as I need subscription to do that.
So I thought fine, will do a subscription for Microsoft 365, but it has payment information with country defaulting to United States. It wont take my credit card info.
Is this wrong way of doing this automation? How to change directory without subscription, or should I dont even have to do this part?
Thanks in advance for any suggestions.
If you want to solve the payment info defaulting to USA, you can change your geo location. Use this list to find your Geographical location identifier (Hex)
then use this command to change it
Set-WinHomeLocation -GeoId $hex
Now try inputting your CC info, and it should show your country instead of USA.

Bing Maps for Enterprise - URL Referrer

Our company is about to launch a web page to production using Bing Maps for Enterprise. There is a setting that should be available, but I'm not finding this setting, URL referrer. This setting is easy to find in the Bing Dev Center on my personal account, but I'm not finding this setting in my company's Azure Portal. Does anyone know how to proceed?
I contacted Microsoft via Azure support request. The URL referrer (whitelisting) option is not available in Azure - Bing Maps API for Enterprise as of 4/28/2020. This is the response received from Microsoft, Bing Maps Enterprise Support.
Tuesday, April 28, 2020 1:21 PM:
Issue Description: Customer is inquiring about adding key whitelisting to their Bing Maps keys
Scope Agreement: As per your communication, you are inquiring about adding key whitelisting to your Bing Maps keys
Currently, the key whitelisting feature outlined in that blog is only available on keys created through www.bingmapsportal.com. We will submit a feature request to have this added to keys created through the Bing Maps Azure resource, so it will be considered in future updates.

How to configure email address for a user in Microsoft Azure AD?

I have created a trial account for Microsoft Azure. In Azure Active Directory, I'm trying to create a new user, but I'm not seeing email address field. I see only username, firstname, lastname and display name fields. Will Azure treat username (like testuser#mydomain.onmicrosoft.com) as an email? or I'm I missing something? I didn't find much information in its documentation.
No, Azure AD will not assume that the username (known as "UserPrincipalName", in the Azure AD Graph API and Azure AD PowerShell module) is actually an email address that can receive emails.
If you would simply want a place to store a given user's email address (one that actually has a mailbox behind it), you can use the "Alternate Email Address" field in the Azure Portal (under "Profile" section for a given user in your directory):
(Note: This field is known as otherMails in Azure AD Graph API, AlternateEmailAddresses in Azure AD PowerShell v1 (MSOnline), and OtherMails in Azure AD PowerShell v2 (AzureAD). In all cases, it's an array of strings, not a single value.)
You can create more user-friendly usernames by adding and verifying a custom domain name to you Azure AD directory: https://learn.microsoft.com/en-us/azure/active-directory/active-directory-add-domain. Once you've done this, you can create users that have usernames such as user#contoso.com (assuming contoso.com is the domain you added).
At this point, it may be that user#contoso.com is also the email address of that user, but again—there is no assumption in Azure AD that this is the case.
For anyone running into issues using with this with an Office 365 developer account, make sure you go through the entire registration process. I thought I had completely setup my office 365 dev account, but I had missed a part related to setting up email.
Also if you are using your personal Microsoft account, for testing etc., be aware that it may appear like some things work the same as the full version or Office 365 dev, but they don't.

Software development start-up: Signing into Microsoft services

We are a start-up software company with around 15 developers. We are almost entirely using Microsoft's technology stack.
A problem that we have at this point is the confusion between signing into Microsoft's online services.
Each developer has two accounts: an Office 365 account and a Windows Live account. The Live account is created from the Office 365 account's email address. So, essentially, we have one email address but two accounts (and thus two passwords).
When logging into an online service, we are often greeted with the following:
For many, this becomes a hit and miss with their various passwords until access is granted. From what I understand:
Work or school account: An Office 365 account OR an account set up in Active Directory?
Microsoft account: A Windows Live account?
Next, can Azure Active Directory help us in any way here?
Are we able to somehow unify our accounts so to have a "single sign-in" for Microsoft's online services?
EDIT:
Further comments on Dushyant Gill answer below.
If we don't need to register our Office365 accounts as Live accounts, then how would I typically add a user to the Azure Active Directory?
When creating a new user, I only have three options:
I guess the last option would be the correct approach if we wanted to move away from Live accounts. I want to add a user to my Azure AD from my Office365 AD?
When I try to do this, I get the following error:
Do I have to link the directories somehow?
davenewza, yes you can take action to improve the experience here (it won't be simple - but given the number of users in you company - it shouldn't be that difficult)
First, your company already has an Azure Active Directory - it is the directory behind your Office 365 subscription. Azure AD authenticates your company's users when they sign in to Office 365 services.
Second, you should use your Azure AD accounts (work or school account) to signup and access other Microsoft services that are meant for businesses: Microsoft Azure, Visual Studio Online, Microsoft Dynamics etc. The disambiguation screen that you see (pasted in your question) only shows up when you're signing in to a service that supports both Azure AD as well as Live accounts. So, move your Azure and other business services subscriptions to use Azure AD accounts and as a thumb rule - your companies users will always select the 'work or school account' option (if ever they see that screen).
Finally, let's get rid of that screen altogether: do you really need the live accounts to run your business? (what Microsoft services are you using that need live accounts?) If none, great - once you've moved your subscriptions to Azure AD accounts - get rid of the live accounts. If you indeed need them - change their emails (add an _live suffix to them) - you as it is have two password - different user names will reduce confusion.
Note that the second step will require you to call Microsoft support (or file online tickets) to move subscriptions for some services - however the risk of downtime is low because you already have Azure AD accounts - you might need to reconfigure permissions once the subscriptions are migrated.
I am with the Azure AD team - get in touch with me if you're stuck - contact me on http://www.dushyantgill.com
Best of luck.
ps: we are working to improve this experience - such that folks like you don't end up in this position in the first place. Stay tuned.

Office 365 API for Global Address List?

I'm experimenting with the API for Office 365... I can see the results of this query okay:
https://outlook.office365.com/ews/odata/Me/Contacts?$select=DisplayName,EmailAddress1,Birthday,Categories
It shows the contacts stored against a certain user.
Is there an equivalent function for querying the contacts that are stored in the "Global Address List? The one you get to if you go to the "Admin" link and then the "Users and Groups" link.
Right now, the Office 365 API is based on the User giving the App consent to particular permissions. The Global Address List is not one of these right now. if this is something you are interested in, I would highly recommend submitted this to UserVoice where our engineering team is monitoring http://aka.ms/OfficeDevFeedback
Azure Active Directory Graph API will provide what you are looking for.
MSDN reference - "Get Contacts"
Newer documentation is at: https://msdn.microsoft.com/Library/Azure/Ad/Graph/api/api-catalog

Resources