Custom command to change UPN in Office 365?

Question

Since DIRSYNC doesn't appear to sync UPN correctly and it needs to be changed VIA powershell online. Is there a way to create a custom command connect and run this powershell command where the new UPN is pulled from the current on-prem UPN?

Set-MsolUserPrincipalName -UserPrincipalName oldemail@old.com -NewUserPrincipalName newemail@new.com

Comments

Hello,

Yes, this is possible. For this purpose, you need to create a Custom Command, for example, as described in this tutorial, and add the Run a program or PowerShell script action to your Custom Command (step 4 of the tutorial). run.powershell.script.action.pngAs for the actual PowerShell script that you need to run as a part of the Custom Command, can you specify the following details so that we could help with the script that meets your requirements:

1. How many Office 365 tenants do you have registered in Adaxes?
2. Is the old UPN stored somewhere among the user's properties?

---

I am sorry I missed your first response.

1. ~2100 users
2. No. Is there a way to pull the old UPN from 365 and set it to the new one?

Open to suggestions but maybe something like:

If 365 UPN does not equal ONPREM upn run "set-MsolUserPrincipalName"

I'm afraid i'm not good enough to create it on my own.

---

I tried this but it doesn't recognize the set-msolprinciplaname command for some reason?

try
{
    $objectId = [Guid]$Context.TargetObject.Get("adm-O365ObjectId")
}
catch
{
    return # No office 365 account
}

$session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $Context.GetOffice365Credential() -Authentication Basic -AllowRedirection
Import-PSSession $Session -AllowClobber -DisableNameChecking

Set-MsolUserPrincipalName -UserPrincipalName $objectId.ToString() -NewUserPrincipalName %userPrincipalName%

Remove-PSSession $session

Answer 1

Hello,

In your situation, we suggest creating a Business Rule that will be triggered automatically after changing a user's UPN in AD and synchronize that changes to Office 365. To create such a Business Rule:

1. Create a new Business Rule.

2. On step 2 of the Create Business Rule wizard, select User and After Updating a User.
   

3. On step 3, add the Run a program or PowerShell script action and paste the below script in the Script field.
   

    # New UPN
    $newUPN = "%userPrincipalName%"
   
    # User ID
    try
    {
        $objectId = [Guid]$Context.TargetObject.Get("adm-O365ObjectId")
    }
    catch
    {
        $Context.LogMessage("The user doesn't have an account in Office 365", "Warning")
        return # No office 365 account
    }
   
    $scriptBlock = {
        param($credential, $objectId, $newUPN)
   
        Import-Module MSOnline
   
        Connect-MsolService -Credential $credential
   
        # Assign new UPN
        Set-MsolUserPrincipalName -ObjectId $objectId -NewUserPrincipalName $newUPN
    }
   
    # Get credentials for the tenant where the user's Office 365 account is hosted
    $o365Credential = $Context.GetOffice365Credential()
   
    # Start Windows PowerShell as a separate process and run the script block in that process
    $job = Start-Job -ScriptBlock $scriptBlock -ArgumentList $o365Credential, $objectId.ToString(), $newUPN
    $job | Wait-Job -Timeout 540
    if ($job -eq $NULL)
    {
        return
    }

4. Enter a short description for the script and click OK.

5. Now, you need to specify a condition for the script to be triggered only when UPN is changed. Right-click the action you've just added and click Add Condition.
   

6. Select the If <property> changed condition type.

7. Specify if User Logon Name has changed.
   

8. Click OK.

9. Finish creation of the Business Rule.

Comments

You are amazing. THANK YOU!!

---

Thank you for your good words. We really appreciate that! :)

---

FYI, the UPN will change via dirsync as long as the user does not have an office 365 license assigned. Once a license has been assigned, you must use powershell or remove the license.

---

This works perfectly. Thank you!