How do I remove "unknown" placeholder from sign out screen

Nathan Overbey 0 Reputation points
2025-08-28T18:38:01.87+00:00

I'm only requiring a email address to create a External ID account. How do I remove the "unknown" placeholder above the email address on the sign out screen.

Also, how do I remove this from the bottom of the email?

Privacy Statement

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. John Burkholder 0 Reputation points
    2025-08-28T18:53:47.45+00:00

    Here’s how you can address both issues in Microsoft Entra External ID:


    1. Remove the “unknown” Placeholder on the Sign-Out Screen

    The “unknown” label typically appears when the user's display name or profile information isn't populated in the ID token. To fix this:

    🔧 Steps:

    Include the profile scope in your OpenID Connect sign-in request.

    Add the login_hint optional claim to your app registration:

    1. Go to Microsoft Entra Admin Center.
      1. Navigate to Entra ID > App registrations.
        1. Select your app → Token configurationAdd optional claim.
          1. Choose ID token and add login_hint.
          Pass the logout_hint parameter during sign-out to ensure the correct user context is retained:
    https://login.microsoftonline.com/{tenant}/oauth2/v2.0/logout?
    post_logout_redirect_uri=https://yourapp.com/logout
    &logout_hint={user_email}
    

    This helps ensure the sign-out screen shows the correct user identity instead of “unknown” [1].


    2. Remove Microsoft’s Privacy Statement and Address from Email Footer

    By default, Microsoft includes its own privacy statement and address in system-generated emails. You can override this by customizing your organization’s privacy settings:

    🔧 Steps:

    1. Go to Microsoft Entra Admin Center.
    2. Navigate to Entra ID > Overview > Properties.
    3. Add:
      • Global Privacy Contact (your org’s privacy contact email).
        • Privacy Statement URL (link to your own privacy policy).
          • Technical Contact (support contact for users).

    If these fields are left blank, Microsoft inserts its own default privacy info in emails and consent screens [2].


    Bonus: Use Custom URL Domains for Branding

    To fully remove Microsoft branding (like ciamlogin.com) from login and email links:

    • Set up Custom URL Domains via Azure Front Door.
    • Example: Use login.yourdomain.com instead of Microsoft’s default.
    • This improves branding and user trust [3].

    Would you like help generating the Graph API calls or configuring these settings in the portal?

    References

    [1] Job Scheduler in Microsoft Fabric - Microsoft Fabric

    [2] Tutorial - Start and Stop Microsoft Fabric Capacity - Lytix

    [3] Microsoft Fabric: Capacity Cost Management Part 2, Automate Pause ...


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.