Intune-TB: EMS Customers receive an error signing into Azure service for the first time

Symptoms
Error: "We were unable to find any subscriptions associated with your account"
Cause

When EMS customers attempt to sign into https://manage.windowsazure.com for the first time they are prompted to sign up.

Paid customers can avoid entering a credit card by following this article - https://technet.microsoft.com/en-us/library/dn832618.aspx

Resolution

Manage the directory for your Microsoft Intune subscription in Azure

his topic covers how to manage a directory that was created for a Microsoft Intune subscription within the Management Portal. The steps to complete this differ depending on whether you already have a subscription for Azure. You must be either the Service Administrator or a co-administrator of an Azure subscription in order to sign in to the Management Portal.

If you don’t yet have an Azure subscription, you just need to sign up by using the work or school account (ORG ID) that you use to sign in to Office 365/Intune.

Organizational Account Sign In

A corresponding subscription for Azure will not be found, but you can click Sign up for Azure and relevant information from the Windows Intune account will be prepopulated in the sign-up form. The same account will be assigned to the Service Administrator role by default.

Organizational Account Free Trial

After you complete the Azure subscription, you can sign in to the Management Portal and access Azure services. Click the Active Directory extension in order to manage the same directory that authenticates your Windows Intune users.

If you do already have an Azure subscription, the process to manage an additional directory is also straightforward. The following diagram may help to see the process.

In this example, Michael Smith has an Office 365 subscription for Contoso.com. He has an Azure subscription that he signed up for by using his Microsoft account, msmith@hotmail.com. In this case, he manages two directories.

 

Subscription

Office 365

Azure

Display name

Contoso

Default directory

Domain name

contoso.com

msmithhotmail.onmicrosoft.com

He wants to manage the user identities in the Contoso directory while he is signed in to Azure using his Microsoft account so he can enable Azure AD features such as multifactor authentication.

O365 And WAAD Directory

In this case the two directories are independent of each other. In order for Michael Smith to manage both directories while he is signed in to Azure as msmith@hotmail.com, he needs to complete the following steps:

  1. Sign in to the Management Portal as msmith@hotmail.com.

  2. Click New > App services > Active Directory > Directory > Custom Create.

  3. Click Use existing directory and check I am ready to be signed out now.

    noteNote
    These steps can only be completed while a user is signed in with a Microsoft account. If the user is signed in with a work or school account, the option to Use existing directory is not available because a work or school account can be authenticated only by its home directory (that is, the directory where the work or school account is stored, and which is owned by the work or school).

  4. Sign in to the Management Portal as global admin of Contoso.onmicrosoft.com (for example, msmith@contoso.com).

  5. When prompted to Use the Contoso directory with Azure?, click continue.

  6. Click Sign out now.

  7. Sign in to the Management Portal as msmith@hotmail.com. The Contoso directory and the Default directory appear in the Active Directory extension.

After completing these steps, msmith@hotmail.com is a global administrator in the Contoso directory.

Now let’s suppose that John Doe needs to sign in to the Management Portal and administer the websites and database resources that are associated with the Azure subscription of msmith@hotmail.com. To do that, Michael Smith needs to complete these additional steps:

  1. Sign in to the Management Portal by using the Service Administrator account of the Azure subscription (in this example, msmith@hotmail.com).

  2. Transfer the subscription to the Contoso directory: click Settings > Subscriptions > select the subscription > Edit Directory > select Contoso (Contoso.com). Note: As part of the transfer, any work or school accounts that are co-administrators of the subscription will be removed.

  3. Add John Doe as co-administrator of the subscription: click Settings > Administrators > select the subscription > Add > type JohnDoe@Contoso.com.

For more information about the relationship between subscriptions and directories, see How Azure subscriptions are associated with Azure AD.

 

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.
Properties

Article ID: 2991007 - Last Review: 09/17/2015 14:45:00 - Revision: 6.0

Microsoft Intune

  • KB2991007
Feedback