Cloud-login: how to switch EntraAD Tenant in Client? #1697

Closed
opened 2025-11-20 06:04:57 -05:00 by saavagebueno · 2 comments
Owner

Originally created by @jpmsh on GitHub (Mar 12, 2025).

Describe the problem

A contractor needs to login to our Netbird-Tenant using our o365-Tenant "name@ourdomain.com". Unfortunately his Browser was already logged into another o365-Tenant "name@foreigndomain.com".
Netbird client is happily connected to netbird, but to a wrong tenant.

How can User logoff his client? Deinstall & new install doesn't logoff from EntraAD!

Expected behavior

I want the user to be able to switch his Users credentials in Netbird client.

Are you using NetBird Cloud?

Using NetBird Cloud with Microsoft EntraAD authentication

NetBird version

latest 0.38

Any workaround?

Originally created by @jpmsh on GitHub (Mar 12, 2025). **Describe the problem** A contractor needs to login to our Netbird-Tenant using our o365-Tenant "name@ourdomain.com". Unfortunately his Browser was already logged into another o365-Tenant "name@foreigndomain.com". Netbird client is happily connected to netbird, but to a wrong tenant. How can User logoff his client? Deinstall & new install doesn't logoff from EntraAD! **Expected behavior** I want the user to be able to switch his Users credentials in Netbird client. **Are you using NetBird Cloud?** Using NetBird Cloud with Microsoft EntraAD authentication **NetBird version** latest 0.38 Any workaround?
saavagebueno added the triage-needed label 2025-11-20 06:04:57 -05:00
Author
Owner

@jpmsh commented on GitHub (Mar 12, 2025):

Workaround is:

delete the folder in "c:\programdata\netbird"
Restart netbird Gui
Connect and auth

@jpmsh commented on GitHub (Mar 12, 2025): Workaround is: delete the folder in "c:\programdata\netbird" Restart netbird Gui Connect and auth
Author
Owner

@nazarewk commented on GitHub (Mar 12, 2025):

You should always be able to manually invite the contractor through an email alias (like name+ourdomain.com@foreigndomain.com) without using any kind of IdP/SSO integrations.

He/she will be able to create a fresh (email+password) account inside your tenant using the invitation.

To "factory reset" the client, you should stop it and remove /etc/netbird/config.json & /var/lib/netbird/state.json. On Windows both would be located at C:\ProgramData\Netbird.

You might want to watch out for https://github.com/netbirdio/netbird/issues/3273

@nazarewk commented on GitHub (Mar 12, 2025): You should always be able to manually invite the contractor through an email alias (like `name+ourdomain.com@foreigndomain.com`) without using any kind of IdP/SSO integrations. He/she will be able to create a fresh (email+password) account inside your tenant using the invitation. To "factory reset" the client, you should stop it and remove `/etc/netbird/config.json` & `/var/lib/netbird/state.json`. On Windows both would be located at `C:\ProgramData\Netbird`. You might want to watch out for https://github.com/netbirdio/netbird/issues/3273
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1697