<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Error message: &quot;A unique identifier was not provided for the user&quot; while adding a new user via AAD]]></title><description><![CDATA[<p dir="auto">Follow the guidelines at to utilize the AAD configuration<br />
at <a href="https://fusionauth.io/docs/v1/tech/identity-providers/openid-connect/azure-ad/" rel="nofollow ugc">https://fusionauth.io/docs/v1/tech/identity-providers/openid-connect/azure-ad/</a><a href="https://redactleunlimited.com" rel="nofollow ugc">redactle</a><a href="https://fusionauth.io/community/forum/category/1/announcements">https://fusionauth.io/community/forum/category/1/announcements</a></p>
<p dir="auto">When create registration is enabled, however, I am unable to create a new FA user. I receive an error "The user was not given a unique identification. This account cannot be used to login; thus, this login request cannot be completed."</p>
<p dir="auto">According to the event log</p>
<pre><code>2/23/2023 07:48:05 AM Z Build a new user object from the returned Userinfo response:
{
  "sub" : "3XXJmjO2q9DQCmGWV8-dyv_EzpOT-m_IAc3NX5nuYXA",
  "name" : "Simon Roberts",
  "family_name" : "Roberts",
  "given_name" : "Simon",
  "picture" : "https://graph.microsoft.com/v1.0/me/photo/$value",
  "email" : "simon.roberts@mycompany.com"
}
2/23/2023 07:48:05 AM Z Linking strategy [LinkByEmail]
2/23/2023 07:48:05 AM Z Resolved email to [smycompany.com]
2/23/2023 07:48:05 AM Z Resolved username to [null]
2/23/2023 07:48:05 AM Z Resolved unique Id to [null]
2/23/2023 07:48:05 AM Z A unique Id was not provided b
</code></pre>
<p dir="auto">How can I get the one-of-a-kind ID? When I open the bearer token in <a href="http://jwt.io" rel="nofollow ugc">jwt.io</a>, I can see my AAD OID.</p>
<pre><code>"name": "Simon Roberts",
"oid": "fa87b189-7080-4050-aa1b-e77e113e6799",
</code></pre>
<p dir="auto">"openid" is the name of my scope.</p>
<p dir="auto">What am I overlooking?</p>
]]></description><link>https://fusionauth.io/community/forum/topic/2360/error-message-a-unique-identifier-was-not-provided-for-the-user-while-adding-a-new-user-via-aad</link><generator>RSS for Node</generator><lastBuildDate>Sat, 12 Sep 2026 23:53:34 GMT</lastBuildDate><atom:link href="https://fusionauth.io/community/forum/topic/2360.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 05 Apr 2023 01:47:21 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Error message: &quot;A unique identifier was not provided for the user&quot; while adding a new user via AAD on Fri, 07 Jul 2023 16:01:32 GMT]]></title><description><![CDATA[<p dir="auto"><a class="mention plugin-mentions-user plugin-mentions-a" href="https://fusionauth.io/community/forum/uid/2370">@polodrawers5</a> Hiya,</p>
<p dir="auto">It looks like the <code>sub</code> claim returned is not a UUID: <code>3XXJmjO2q9DQCmGWV8-dyv_EzpOT-m_IAc3NX5nuYXA</code>.</p>
<p dir="auto">FusionAuth requires all <a href="https://fusionauth.io/docs/v1/tech/reference/limitations#identifiers" rel="nofollow ugc">user ids to be a UUID</a>.</p>
<p dir="auto">The default unique identifier for OIDC is <code>sub</code>, but that can be changed under the <a href="https://fusionauth.io/docs/v1/tech/identity-providers/openid-connect/#options" rel="nofollow ugc"><code>Options</code> tab</a>.</p>
<p dir="auto">So I'd try changing that to <code>oid</code> and see if you can create a user.</p>
<p dir="auto">Thanks for using FusionAuth!</p>
]]></description><link>https://fusionauth.io/community/forum/post/6282</link><guid isPermaLink="true">https://fusionauth.io/community/forum/post/6282</guid><dc:creator><![CDATA[dan]]></dc:creator><pubDate>Fri, 07 Jul 2023 16:01:32 GMT</pubDate></item></channel></rss>