1. When logging in to the management console after linking with EntraID, is it possible to manually enter user information for SSO login?
Will the user account of the logged-in terminal be used?
2. How are IDs linked between the EMA management server and EntraID?
- Is ID information provisioned from EntraID to the EMA server?
- When attempting to log in to the EMA server, does authentication move to EntraID?
3. Regarding “1,” if manual input is possible, are there any specific setting procedures?
4. When linking with EntraID, what is the authentication route if “Login With IntelEMA Credentials” is selected when logging in to the management console?
Am I correct in understanding that authentication is only performed locally?
5. When logging in to the management console of the EMA server I’m currently building, a Microsoft error screen appears saying “AADSTS900021: Requested tenant identifier ‘00000000-0000-0000-0000-000000000000’ is not valid. Tenant identifiers may not be an empty GUID.”
Do you know any possible reasons for this?
Please note that EMA users need to be created in Azure Entra ID first. I suggest reviewing the Microsoft Entra ID documentation to understand how it works:
I set up the EMA server with Azure AD authentication, and when I perform SSO sign-in to the EMA management console, I go through the Microsoft authentication screen and MFA authentication, and when I return to the management console, the message “Azure Login Failed” is displayed, and logging in with the EntraID user account fails.
Furthermore, the log file contains the message “Upn <username> does not exist or is not authorized.”
What setting do you think is missing?
Will I need to change the IIS web.config, etc.?
In addition to the previous question, if I use an EntraID user account to install EMA, will that user account be automatically registered as a global administrator?
Pre-installation Instructions for Microsoft Azure AD Environments
If you plan to install Intel® EMA in an existing Microsoft Azure AD environment, follow the steps below in order to enable Intel® EMA to successfully connect to the Azure AD environment. We recommend that you perform these steps before installing Intel® EMA, however they can be performed after installation, though you will not be able to add users and perform other Intel® EMA actions until you perform these steps in Azure AD.
For more information, please find the below attached link:
I thought I had created the file based on the materials you provided, but an error occurred, so I contacted you.
Would you mind answering my questions?
・Cause and solution for “Azure Login Failed” error when logging in to EMA
・Will I need to change the IIS web.config, etc.?
・if I use an EntraID user account to install EMA, will that user account be automatically registered as a global administrator?
Could you please confirm if you have followed Section 1.3.2 as outlined in the Intel EMA documentation?
Currently, Intel® EMA does not support internationalization. The operating system must have English-US Windows display language, English-US system locale, and English-US format (matching the Windows display language).
For reference, please see Section 1.3.2 OS in the following guide:
I would like to confirm the following points again. Is that OK?
・Cause and solution for “Azure Login Failed” error when logging in to EMA
・Will I need to change the IIS web.config, etc.?
・if I use an EntraID user account to install EMA, will that user account be automatically registered as a global administrator?
Additionally, as additional supplementary information, we have changed the URL of the EMA management console that was set at the time of construction, and the following message is displayed. Does this have an effect?
※Please ignore the security warning message.
