Here’s how you can address both issues in Microsoft Entra External ID:
✅ 1. Remove the “unknown” Placeholder on the Sign-Out Screen
The “unknown” label typically appears when the user's display name or profile information isn't populated in the ID token. To fix this:
🔧 Steps:
Include the profile
scope in your OpenID Connect sign-in request.
Add the login_hint
optional claim to your app registration:
- Go to Microsoft Entra Admin Center.
- Navigate to Entra ID > App registrations.
- Select your app → Token configuration → Add optional claim.
- Choose ID token and add
login_hint
.
logout_hint
parameter during sign-out to ensure the correct user context is retained: - Choose ID token and add
- Select your app → Token configuration → Add optional claim.
- Navigate to Entra ID > App registrations.
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/logout?
post_logout_redirect_uri=https://yourapp.com/logout
&logout_hint={user_email}
This helps ensure the sign-out screen shows the correct user identity instead of “unknown” [1].
✅ 2. Remove Microsoft’s Privacy Statement and Address from Email Footer
By default, Microsoft includes its own privacy statement and address in system-generated emails. You can override this by customizing your organization’s privacy settings:
🔧 Steps:
- Go to Microsoft Entra Admin Center.
- Navigate to Entra ID > Overview > Properties.
- Add:
- Global Privacy Contact (your org’s privacy contact email).
- Privacy Statement URL (link to your own privacy policy).
- Technical Contact (support contact for users).
- Privacy Statement URL (link to your own privacy policy).
- Global Privacy Contact (your org’s privacy contact email).
If these fields are left blank, Microsoft inserts its own default privacy info in emails and consent screens [2].
✅ Bonus: Use Custom URL Domains for Branding
To fully remove Microsoft branding (like ciamlogin.com
) from login and email links:
- Set up Custom URL Domains via Azure Front Door.
- Example: Use
login.yourdomain.com
instead of Microsoft’s default. - This improves branding and user trust [3].
Would you like help generating the Graph API calls or configuring these settings in the portal?
References
[1] Job Scheduler in Microsoft Fabric - Microsoft Fabric
[2] Tutorial - Start and Stop Microsoft Fabric Capacity - Lytix
[3] Microsoft Fabric: Capacity Cost Management Part 2, Automate Pause ...