Why #EXT# is seen in the username? 

Why #EXT# is seen in the username? 

2169
Created On 11/21/22 04:33 AM - Last Modified 04/16/25 19:45 PM


Question


Why #EXT# is seen in the username? 



Environment


  • Prisma Access
  • Cloud Identity Engine (CIE)


Answer


  1. The #EXT# is actually an identifier that Microsoft uses to differentiate tenants from guest users.
  2. Example: User bob@example.com, from directory example, is added as an external user in directory testdomain. This results as a user in testdomain with UPN bob_example.com#EXT#@testdomain.onmicrosoft.com.
  3. Refer to Microsoft- User Principal Name and Ext.
  4. The above is normal and CIE accepts this username and syncs with the firewall as well. 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kFGqCAM&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail