Hi Office 365 and Azure specialists,
In this QuickTip, I will present something that is not at all specific to Office 365 nor Azure. However, it is particularly useful for consultants like me who have to log into various tenants as different users from my computer. Actually, this tip is valid for almost every website that you have to log into (I also use it for my personal or Pro Microsoft Account, Gmail accounts, ...). Indeed, the session mechanism in most website uses cookies.
What is a cookie ?
In a few words, a cookie is a piece of information included in the HTTP roundtrip between clients and servers. It can be used for numerous purposes. In the context of a session mechanism, it contains an information that allows the server to identify a request as being issued by a particular logged-in user. This piece of information is persistent in the client browser (for a particular server address) at least for the period of the session (until you close the browser). It can also persist for a longer period if you tick the typical "Remember me" checkbox at login time.
Browsers and persistent data
For a very long time, all persistent data in the browser (Cookies, History, Remembered passwords, ...) have been bound to the OS user. It means, for instance, that if you chose to remember your password for a site. It's for your current OS user.
Act as another user
If, for any reason, you have to log in as another user (e.g. Test a feature in a particular user context, ...). You have multiple options :
- Log out from your current session and log back in with the new credentials (This sometimes can cause troubles if you don't restart the browser, because the cookies might not be removed).
- If you're in a fully integrated authentication mechanism (AD on-prem or ADFS), you can run your browser as a different user.
On Windows: * hold the the Shift key and right-click your browser icon * Select "Run as different user" * Enter the other user credentials
- If you are not in a fully integrated authentication mode, (e.g. Office 365 without ADFS), you need to run another browser session (so your cookies and history won't bother you). You can open a new "Incognito" session, almost all current browsers has such a capability. You then use a kind of sandboxed context separated from your regular user data.
Act as many different users (Be schizophrenic)
In some cases, you might want to be able to easily test several different user contexts on the same Office 365 Tenant. You also might want to be able to easily deal with multiple tenants without the need of logging out /logging in continously. In my very own daily situation, I work with 4 different customers' tenants every week (sometimes during the same day), eventually with different accounts (for testing) on each. Before being aware of this tip, it was really a mess when I needed to grab an info for a customer while in a middle of something else for another customer. Google Chrome offers a capability that helps me a lot every day, and, I think, can help you a lot too: The "People" feature.
It is a mechanism built in Chrome to use multiple user profiles with the same OS User account.
It basically works as a "named incognito mode" except that it keeps the history and cookies for the user profile. Open Chrome and type chrome://settings/people in the address bar
Click the "Manage other people" section
Click the "ADD PERSON" to add a new user profile (give it a name and optionnally select an icon, It can avoid confusion between sessions), you can also create a dedicated desktop shortcut for the user profile.
Now that you have other people available, in Chrome upper right corner you will see the name of the current user. You can click that name to quickly open a "session" with another user profile. In this menu, you can also directly access the "Manage people" window. Open a user profile, log into the system (e.g. Office 365) you want to bind this user (You can even remember the password,...). Then switch to another user profile and log into another Office 365 tenant with another account. With this cool feature, I can now be simultaneously logged in as different users on different tenants without the need of signing in / signing out every time I switch. As always, I hope that will help.
Best regards,
Yannick