Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Teams > TeamsFederationConfiguration - config drifts #2601

Closed
archeedev opened this issue Nov 28, 2022 · 2 comments
Closed

Teams > TeamsFederationConfiguration - config drifts #2601

archeedev opened this issue Nov 28, 2022 · 2 comments

Comments

@archeedev
Copy link

archeedev commented Nov 28, 2022

It seems that the latest release - 1.22.1123.1 - fixed indeed the TeamsFederationConfiguration issue: #2576

However, please correct me here if I am misinterpreting this,
but I think we have an issue with evaluating drifts.

I see the external domains applied ok in the destination tenant - same amount of domains on both tenants,
so there should probably be no drift warnings(?)

But I keep getting config. drift warnings - weird screenshot after it is redacted but they are the same domains (which is ok).

image

Not yet sure exactly what is causing this, my working theory is that we might be comparing things wrongly, eg. (to follow the outcome from event viewer):

 <ParametersNotInDesiredState>
            <Param Name="AllowedDomains"><CurrentValue>gmail.com facebook.com ...

with

 <DesiredValues>
        <Param Name ="Identity">Global</Param>
        <Param Name ="AllowFederatedUsers">True</Param>
        <Param Name ="AllowedDomains">Domain=gmail.com,Domain=facebook.com,...

In other words:
gmail.com <> Domain=gmail.com

@andikrueger andikrueger added Teams V1.22.1123.1 Version 1.22.1123.1 labels Nov 29, 2022
@andikrueger
Copy link
Collaborator

Could you share an export of this setting? Maybe there is an issue on how the values are returned and compared.

@NikCharlebois
Copy link
Collaborator

NikCharlebois commented Nov 29, 2022

Based on your screenshot it looks like your configuration defines the domains as:

AllowedDomains = @("Domain=northwind.com", "Domain=contoso.com")

With the Domain= prefix before. I would recommend removing those from the configuration and simply keeping the actual domain name. Not sure how these got in there, but could it be that you used an old version to do the export and are now trying to apply it with a newer version?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants