search

apple / password-manager-resources

A place for creators and users of password managers to collaborate on resources to make password management better.
MIT License
4.14k stars 445 forks source link

Shared Credentials Suggestion: Microsoft Domains #719

Open dan-el opened 10 months ago

dan-el commented 10 months ago

Hi, I am a Strongbox Password Manager user and was sent here with my request. https://github.com/strongbox-password-safe/Strongbox/issues/732 Thanks for your consideration.

Microsoft knows two types of accounts: Corporate (Office365, Azure, etc.) and Personal (live.com)

One can login with any type of account at https://login.microsoftonline.com/ - personal accounts will be redirected to https://login.live.com/ One cannot login with a corporate account at https://login.live.com/ - the page will show an error message "That Microsoft account doesn't exist"

I have accounts in my database with the URL set to https://login.microsoftonline.com/ (corporate Office365 accounts) which are being offered at https://login.live.com/ when the "Associated Domains" feature is turned on. Those accounts won't work on that login form as described above.

My request: Separate the Microsoft associated domains list into two lists. One for Microsoft's personal login service (aka live.com) and one for Microsoft's corporate services.

I tried different login forms with corporate and personal accounts:

personal domains: live.com, skype.com, hotmail.com, microsoft.com working for both types: onenote.com, office.com, microsoftonline.com corporate domains: n/a

GioSensation commented 9 months ago

+1 to this. For corporate accounts there is also windowsazure.com (see for example the page to change your corporate account password when using activedirectory: https://account.activedirectory.windowsazure.com/ChangePassword.aspx).