Custom command to change UPN in Office 365?

Question

Since DIRSYNC doesn't appear to sync UPN correctly and it needs to be changed VIA powershell online. Is there a way to create a custom command connect and run this powershell command where the new UPN is pulled from the current on-prem UPN?

Set-MsolUserPrincipalName -UserPrincipalName oldemail@old.com -NewUserPrincipalName newemail@new.com

Comments

Hello,

Yes, this is possible. For this purpose, you need to create a Custom Command, for example, as described in this tutorial, and add the Run a program or PowerShell script action to your Custom Command (step 4 of the tutorial). run.powershell.script.action.pngAs for the actual PowerShell script that you need to run as a part of the Custom Command, can you specify the following details so that we could help with the script that meets your requirements:

1. How many Office 365 tenants do you have registered in Adaxes?
2. Is the old UPN stored somewhere among the user's properties?

---

I am sorry I missed your first response.

1. ~2100 users
2. No. Is there a way to pull the old UPN from 365 and set it to the new one?

Open to suggestions but maybe something like:

If 365 UPN does not equal ONPREM upn run "set-MsolUserPrincipalName"

I'm afraid i'm not good enough to create it on my own.

---

I tried this but it doesn't recognize the set-msolprinciplaname command for some reason?

try
{
    $objectId = [Guid]$Context.TargetObject.Get("adm-O365ObjectId")
}
catch
{
    return # No office 365 account
}

$session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $Context.GetOffice365Credential() -Authentication Basic -AllowRedirection
Import-PSSession $Session -AllowClobber -DisableNameChecking

Set-MsolUserPrincipalName -UserPrincipalName $objectId.ToString() -NewUserPrincipalName %userPrincipalName%

Remove-PSSession $session

Answer 1

Hello,

In your situation, we suggest creating a Business Rule that will be triggered automatically after changing a user's UPN in AD and synchronize that changes to Office 365. To create such a Business Rule:

1. Create a new Business Rule.

2. On step 2 of the Create Business Rule wizard, select User and After Updating a User.
   

3. On step 3, add the Run a program or PowerShell script action and paste the below script in the Script field.
   

    # New UPN
    $newUPN = "%userPrincipalName%"
   
    # User ID
    try
    {
        $objectId = [Guid]$Context.TargetObject.Get("adm-O365ObjectId")
    }
    catch
    {
        $Context.LogMessage("The user doesn't have an account in Office 365", "Warning")
        return # No office 365 account
    }
   
    $scriptBlock = {
        param($credential, $objectId, $newUPN)
   
        Import-Module MSOnline
   
        Connect-MsolService -Credential $credential
   
        # Assign new UPN
        Set-MsolUserPrincipalName -ObjectId $objectId -NewUserPrincipalName $newUPN
    }
   
    # Get credentials for the tenant where the user's Office 365 account is hosted
    $o365Credential = $Context.GetOffice365Credential()
   
    # Start Windows PowerShell as a separate process and run the script block in that process
    $job = Start-Job -ScriptBlock $scriptBlock -ArgumentList $o365Credential, $objectId.ToString(), $newUPN
    $job | Wait-Job -Timeout 540
    if ($job -eq $NULL)
    {
        return
    }

4. Enter a short description for the script and click OK.

5. Now, you need to specify a condition for the script to be triggered only when UPN is changed. Right-click the action you've just added and click Add Condition.
   

6. Select the If changed condition type.

7. Specify if User Logon Name has changed.
   

8. Click OK.

9. Finish creation of the Business Rule.

Comments

You are amazing. THANK YOU!!

---

Thank you for your good words. We really appreciate that! :)

---

FYI, the UPN will change via dirsync as long as the user does not have an office 365 license assigned. Once a license has been assigned, you must use powershell or remove the license.

---

This works perfectly. Thank you!