Azure Ad b2c : Add new member user with invitation

2020-06-19 05:53发布

问题:

I have an Azure Ad b2c running up on Azure and I want to create user with inviations in B2C.I tried by creating Guest user but that user is unable to login. because that user is created as B2B user.

I also tried by adding user manually. but I am not able to add my own domain. eg. user@xxxx.onmicrosoft.com. but I want to create user@gmail.com.

I googled it a lot and I found that i have to add a custom domain for that. when I tried to do so I found that I have to register my domain in DNS registrar. which is not run long in future.

I also followed the related question on stack overflow that is .

How do you add a user with a local name in Azure Active Directory B2C?

So what I want is , I add a user by and invitation and that user should be enable to login.

Can you help me to get rid of this problem?

I am breaking my head for last 4 days.

Thanks a lot.

回答1:

The easier solution is to create a local account in the Azure AD B2C directory through the Azure AD Graph API and then send an email message to the new user with instructions to "forget their password" which you have randomized.

The harder solution is to implement the invitation flow using a custom policy.

This invitation flow is described here and implemented here.

The invitation flow invites a new user by pre-registering a local account in the Azure AD B2C directory through the Azure AD Graph API and then sending a signed redemption link to the email address for this local account.

This redemption link directs the new user to the password reset policy.



回答2:

You can only add B2C users to an Azure Active Directory B2C tenant. Which is different from a normal Azure Active Directory tenant. You need to specify a tenant to be a B2C tenant at creation, and this cannot be changed later.

More information on creating a B2C tenant can be found in Tutorial: Create an Azure Active Directory B2C tenant