Azure-docs: Manage Groups not availible for Pass-Though Authentication Staged Rollout

[mybm3w]

I have enabled staged rollout as per document, but under Enable staged Rollout Feature when I enable Pass-Thought Authentication it notifies that it has been succesfully enabled, but the managed groups option is disabled. I have tried to refresh and nativate to this page again. I have also enabled Seamless single sign-on and manage groups is availible next to this feature.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 3f2a7330-82fa-9c0d-0f34-b2a99ef13c64
• Version Independent ID: d941f435-3443-02a1-57c0-7f4173173249
• Content: Azure AD Connect: Cloud authentication via staged rollout
• Content Source: articles/active-directory/hybrid/how-to-connect-staged-rollout.md
• Service: active-directory
• Sub-service: hybrid
• GitHub Login: @billmath
• Microsoft Alias: billmath

[MohitVerma-MSFT]

Hi @mybm3w ,

Thank you for your feedback! We will review and provide an update as appropriate.

[mybm3w]

To add to this. In my tenant, if I disable Pass-Though authentication and then enable Password Hash Sync, both the manage group buttons are enabled next to Password Hash Sync and Pass-Though Authentication. If I disable Password Hash Sync, and enable Pass-Though authentication the manage groups buttons are disabled. I can send a screenshot if needed.

[mybm3w]

I managed to get PTA working by using the Add-AzureADMSFeatureRolloutPolicyDirectoryObject PowerShell command to add the group. In the UI the manged group next to PTA is still disabled.

[bpfoley45]

I also encountered this issue in my tenant and was able to workaround using the AzureADPreview cmdlets as mybm3w mentioned

[MarkDordoy]

I also hit this issue with the same workaround

[shashishailaj]

@mybm3w Thank you for pointing this out. Currently the feature is in preview and we appreciate the details provided. However we will engage the documentation team to review the details about what can be updated in the article at the moment.

Thank you.

[gsnyder87]

after using the Add-AzureADMSFeatureRolloutPolicyDirectoryObject cmdlet, do you see anything in the applies to property of the Get-AzureADMSFeatureRolloutPolicy results? I added a group to the seamlessSso rollout policy and still do not see anything in the results.

[shrivastavasumit]

Is this issue resolved? I still don't see "Managed Groups" under "Pass-through Authentication"

[shrivastavasumit]

Do we have any ETA for fixing this issue? Also, if we want to use Add-AzureADMSFeatureRolloutPolicyDirectoryObject . How can we find the "Cloud Authentication roll out policy ID". Its one of the parameters for the command

[shrivastavasumit]

Found it. "Get-AzureADMSFeatureRolloutPolicy" gives the details

[billmath]

@mybm3w Thank you for this issue. I have told from engineering that this fix was put in to production yesterday. I would say go ahead and try again. Thanks!

please-close