What email addresses to use for ALS? - azure-lab-services

We are trying to use Azure Lab Services for running training courses.
Log in requires a Microsoft account. We created mailboxes in our domain but Microsoft wouldn't accept 'work' email addresses for Microsoft accounts.
Next we created outlook.com email addresses but after a short while Microsoft locked out these accounts for some sort of policy violation.
Then we used some Gmail addresses which we have had for some time. These too worked for a few days and then Microsoft locked them out for a policy violation.
The policy violation must have been related to having multiple accounts with some of the same recovery information. The accounts were used for nothing other than as a way of accessing Azure Lab Services.
So we can't use work email addresses, Outlook.com email addresses or Gmail addresses. That leaves us having to ask course attendees to use their own personal email address to register a Microsoft account in order to attend a training course being provided by their employer. Some people won't mind but I'm sure some will object on principal.
Has anyone else come across this issue and found a workable solution? It is strange that a product like Azure Lab Services which is surely aimed at a lot of businesses has such a low level blocker in the way of making it work.
Thanks in advance.

Azure Lab Services allow you to use AAD account or Microsoft accounts. If you are trying to use your non-Microsoft account such as Yahoo or Google accounts to sign in to the portal, create a Microsoft account that will be linked to your non-Microsoft account. Then, follow the steps to complete the registration process. Could you please elaborate on how your work email accounts are configured? Ideally, you should be able to create a Microsoft account linked with the work addresses.

The solution was to create AAD accounts and use those accounts to login to Azure Labs. It seems to be working OK now...fingers crossed.

Related

Restricting personal accounts user login

I have to build a portal for my institute which will act as a job portal for the institute. Companies should be able to post their job/intern openings on the portal. For that to happen, one prime condition is that HRs should login only with their work profiles and thus their personal accounts(gmail,etc.) should be restricted. I have seen some similar questions where we had to whitelist a particular domain and restrict all others but this might not be feasible in this case, as whitelisting all the work domains doesn't seem practical. Is there a built-in solution for this?
My Tech Stack is:
NextJS for the frontend.
For the backend part, I am thinking of either NodeJS+mongoDB OR Sanity.io depending on a more feasible solution for the above problem statement...
Restrict yahoo/gmail and only allow their company's email or school's email (.edu). You can also have a dropdown of whitelisted school's email or company.
School or companies who wish to join your platform will have to be manually added once. Basically whitelisted list can perform registration in the future.

How can I regain access to a Google Developer account without TFA?

My organization has a Google Developer account that is tied to an employee who has since resigned. We have the credentials for said account, but we're unable to fully authenticate due to the MFA being tied to his mobile number, which we do not have access to.
I've created a new Google Developer account, but I'm not able to assign it to our organization because of conflicts with the old account.
Any suggestions on how to assign the new account to our organization so I can pay the developer fee and start utilizing the functions?
Thank you!

Another account access my Analytics API

I want to build a dashboard to my clients access your respective website analytics. But, after some research, I'm stuck.
Let's imagine the scenario:
My Analytics Account:
Client X - websitex.com
Client Y - websitey.com
In my dashboard, when the cliente Y log in, the data (pageviews) of websitey.com is shown on graphics.
But, there's a way to do that? By the moment, the only thing i got is retrieve information for my logged account (my analytics ID), not the information about another account.
There's a way to use the Google API, or, I'll have a "separate database" to save data each website?
Sorry, I'm really lost at the moment.
You can only view Google Analytics Accounts that you are authorized to view. For some reason this is a source of major confusion (seeing that your are not the first to ask), although it should be fairly self-evident.
If you want to see data from your clients account you have to ask your client to add your Google email to the GA account. If an email address is added to multiple accounts you can, via the API, choose between the accounts. Clientside authorization (OAuth2) will only work as long as somebody is logged in via a client application (usually a browser). The practial effect is that everybody who is authenticated via OAuth against Google will see only his own GA accounts, not other peoples data.
If you want a serverside application to pull data from various GA accounts you need a service account. But even the service account needs to be added to the GA accounts.
You can use the core reporting API, but the API will not give you access to accounts that you are not authorized to look at; your client needs to authorize you (or your applications service account).

Migrate Google Merchant account to different country

Slovakia has been added recently to list of supported Merchant countries for Google Play.
I have an account in Czech Republic (CZK) paired with Merchant Account with active paid and free apps and want to change the country to Slovakia (EUR) - mostly because i of the fees related to money transfers from a different currency (CZK to EUR) on my business account.
I have been searching on Google but found nothing except for transferring all my apps to new developer account. I'm afraid that this will hurt my play store search positions and i won't be able to transfer the Google Play Services data (LeaderBoards, Achievements)
Also i want to keep the package names.
Had someone done this? How should i proceed?
June 2017 update:
Apps with subscriptions can now be transferred!!!
The original answer:
This is a complete answer I got from Google:
Hi,
Thanks for contacting Google Play Developer Support.
I understand you'd like to change the country associated with your Google Payments Merchant account. Once your Google Payments Merchant account has been created, it's not possible to change the country associated with that account. Instead, I can cancel and refund your existing developer account and transfer your apps to a new developer account that has the appropriate merchant country details.
To get started with this process:
Edit your current developer account name. If you'd like to continue to use your developer name with the new account, you’ll need to change your current name in order to free it up for the new account. For example, name the old account “xxx-OLD,” so you can use "xxx" in your new account. Make sure you save your settings.
Create a second Google Account (with a new, different email address). After you've created the new account, you will need to configure Google Payments with a billing address corresponding to your preferred merchant country.
After you've registered the newly created Google Play Developer Console account, create a new Google Payments Merchant account from the Developer Console. Pay special attention to the country listed for your legal business address. You may need to adjust your Google Payments settings if you haven't configured your billing address properly.
Use this online checklist to submit your app transfer request.
Please note however at this time, an app transfer can't be completed with in-app subscriptions currently or previously configured for your app; this includes subscriptions that do not have subscribers, or those apps which have had all subscriptions canceled.
I understand this limitation can be frustrating, and I apologize that we don't currently have a more seamless way to transfer these applications across accounts. We're actively working with our teams to design a better experience for developers with apps using in-app subscriptions, though we do not currently have an ETA.
I appreciate your understanding, and your dedicated support of Google Play.
Regards,
xxxxx
Google Play Developer Support
The country associated with your Google Play Developer account can't be changed. However, you can create a new account that uses a different country and transfer your apps to your new account.
To transfer apps to a new account, you'll need to prepare some account information. To learn what information you need and to send your request, go to the Google's app transfer checklist.
Reference: https://support.google.com/googleplay/android-developer/answer/139626

iTunes connect will not let me add myself as a user

I am working on an app in iTunes connect for a client, under their iTunes connect account. I want to add myself as a user so that I can get email notifications of updates in app status. When I try to add myself as a user I get the following message:
The email address you entered already belongs to an iTunes Connect account. To continue, enter a different email address
I am using this email address on my own company's iTunes connect account, but not on my client's account. How can I add myself as a user?
#sarnold Turning your comment into an answer because it worked for me.
Two Separate Websites
Apparently for historical and organizational reasons, Apple operates their developer and app store business in a bifurcated manner.
developer.apple.com
The web site for all the technical resources, including documentation, WWDC videos and such.
itunesconnect.apple.com
This completely separate web site handles the business end:
Contracts, banking, payments.
Uploading your finished app.
Defining your In-App Purchase products.
Problem: Different Handling Of Accounts
The developer.apple.com site is slick in that a programmer can have a single Apple ID used to join multiple developer accounts. She may work for three different companies, and be assigned a role on each of those companies’ Developer accounts all on the same Apple ID. When she logs in to the Developer site, she is presented with a popup menu asking which of the three companies’ Developer accounts she wants to access during this work session. Nice.
The problem: in iTunesConnect, not so nice. In iTunesConnect, the "admin" person cannot assign existing Apple IDs as members with a role. Very strange. The admin is forced to create a new ID for each person being adding to the team. That means the person joining must have multiple email address. If an admin tries to add you to their iTunesConnect with an email address already used on some other company's iTunesAccount, an error message reports that email address / Apple ID is already in use. Obviously the programming team running the iTunesConnect site could use some help from the Developer site's team. ☹
Workaround: Email Address Trick
The workaround cited by sarnold involves a feature of email addresses. The spec for email servers has a feature where you can extend your email address. You can add a suffix to the first part of your email name by appending a "+" PLUS SIGN. From what I could figure out, the email software first looks for the extended name. If no such name is found, it drops the extension and looks again. If found, the shorter version of the email address is actually used.
So if the programmer Susan wants to use her email address susan#example.com for a second or third iTunesAccount, she tells her client's admin person at Acme Corporation to use something like this as her email address: susan+acme.com#example.com. Apple will still create a needless extra Apple ID for Susan, but at least Susan does not have to bother with creating and accessing extra email accounts. The emails sent by Apple will arrive at her susan#example.com address.
Susan double-checked this would work before talking to the admin person. She sent herself an email to susan+acme.com#example.com to make sure it arrived at the susan#example.com account.
Effectively, the email servers are not fooled by the extended email address, but iTunesConnect is fooled into creating an new Apple ID using an old email account.
Basically, you can't invite other iOS devs to review your efforts seems to be the result of this policy.
I had (and have) the exact same problem... what makes me kinda like FlavorScape's suggestion ;)
What I did is something similar to sarnold's comment: I used an alternative email address (_#gmail.com instead of _#googlemail.com) and this actually created a new AppleID with this email address.
It works fine, but it would be so much better to just connect my actual Developer account to my client's.
The way it's like at the moment, I can not even access the developer resources and (most importantly) the provisioning center with the new Apple ID, so my client has to do create new provisioning profiles and stuff, which is pretty frustrating and complicated.
Additionally, it is a pain to let him test the Apps on his own devices, because of the developer certificate is installed on my Mac, not his, and I am therefore the only one (or better, my Mac is the only computer) that can install new provisioning profiles on his devices.
Is there a better way to connect the accounts and solve these problems?
Cheers,
Nils
Apple now will allow the same email address to be invited to multiple itunes connect accounts and no longer allows new emails to be added with the +. Just a word of warning to others who were doing this the original post is now out of date with Apples new policy it seems.
#knl: The problem in the original question is specifically with iTunes Connect. If you want to be able to manage the Provisioning center -- to make profiles etc -- ask your client to add you to that account. Here are the steps:
Go to "Member Center"
Select the "People" tab
Click on invitations
Select "Invite person"
in the next screen they can select your role including "Member" (limited access) and "Admin" (full access)
From apple documentation:
You can only create test user accounts using an iTunes Connect
accounts with the Admin or Technical role assigned to it. Test users
do not have access to iTunes Connect, but will be able to test in-app
purchases in a development environment on a registered test device.
Link here