Skip to content

Commit 057fb3d

Browse files
2 parents 7a40aa5 + fc61b18 commit 057fb3d

File tree

1,578 files changed

+8102
-9483
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,578 files changed

+8102
-9483
lines changed

.openpublishing.redirection.json

Lines changed: 65 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -245,6 +245,12 @@
245245
"redirect_url": "/azure/site-recovery/vmware-physical-mobility-service-overview#install-mobility-agent-through-ui",
246246
"redirect_document_id": false
247247
},
248+
249+
{
250+
"source_path": "articles/site-recovery/scvmm-site-recovery-deprecation.md",
251+
"redirect_url": "/azure/site-recovery/site-to-site-deprecation",
252+
"redirect_document_id": false
253+
},
248254
{
249255
"source_path": "articles/machine-learning/service/quickstart-get-started.md",
250256
"redirect_url": "/azure/machine-learning/service/quickstart-run-cloud-notebook",
@@ -520,11 +526,16 @@
520526
"redirect_url": "/azure/machine-learning",
521527
"redirect_document_id": false
522528
},
529+
{
530+
"source_path": "articles/cognitive-services/LUIS/luis-how-to-add-example-utterances.md",
531+
"redirect_url": "/azure/cognitive-services/LUIS/luis-how-to-add-entities",
532+
"redirect_document_id": false
533+
},
523534
{
524535
"source_path": "articles/cognitive-services/LUIS/luis-tutorial-prebuilt-intents-entities.md",
525536
"redirect_url": "/azure/cognitive-services/LUIS/tutorial-machine-learned-entity",
526537
"redirect_document_id": false
527-
},
538+
},
528539
{
529540
"source_path": "articles/cognitive-services/LUIS/luis-quickstart-intents-only.md",
530541
"redirect_url": "/azure/cognitive-services/LUIS/tutorial-intents-only",
@@ -43598,10 +43609,62 @@
4359843609
"redirect_url": "articles/active-directory/develop/app-registrations-training-guide-for-app-registrations-legacy-users.md",
4359943610
"redirect_document_id": false
4360043611
},
43601-
{
43612+
{
4360243613
"source_path": "articles/azure-monitor/app/powershell-script-create-resource.md",
4360343614
"redirect_url": "/azure/azure-monitor/app/create-new-resource#creating-a-resource-automatically",
4360443615
"redirect_document_id": false
43616+
},
43617+
{
43618+
"source_path": "articles/load-balancer/load-balancer-outbound-connections-classic.md",
43619+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-outbound-connections-classic",
43620+
"redirect_document_id": false
43621+
},
43622+
{
43623+
"source_path": "articles/load-balancer/load-balancer-multivip.md",
43624+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-multivip",
43625+
"redirect_document_id": false
43626+
},
43627+
{
43628+
"source_path": "articles/load-balancer/load-balancer-get-started-ilb-classic-cloud.md",
43629+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-get-started-ilb-classic-cloud",
43630+
"redirect_document_id": false
43631+
},
43632+
{
43633+
"source_path": "articles/load-balancer/load-balancer-get-started-ilb-classic-ps.md",
43634+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-get-started-ilb-classic-ps",
43635+
"redirect_document_id": false
43636+
},
43637+
{
43638+
"source_path": "articles/load-balancer/load-balancer-get-started-ilb-classic-cli.md",
43639+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-get-started-ilb-classic-cli",
43640+
"redirect_document_id": false
43641+
},
43642+
{
43643+
"source_path": "articles/load-balancer/load-balancer-get-started-internet-classic-ps.md",
43644+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-get-started-internet-classic-ps",
43645+
"redirect_document_id": false
43646+
},
43647+
{
43648+
"source_path": "articles/load-balancer/load-balancer-get-started-internet-classic-cloud.md",
43649+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-get-started-internet-classic-cloud",
43650+
"redirect_document_id": false
43651+
},
43652+
{
43653+
"source_path": "articles/load-balancer/load-balancer-get-started-internet-classic-cli.md",
43654+
"redirect_url": "/previous-versions/azure/load-balancer/load-balancer-get-started-internet-classic-cli",
43655+
"source_path": "articles/cognitive-services/translator/how-to-install-containers.md",
43656+
"redirect_url": "/azure/cognitive-services/translator/translator-info-overview",
43657+
"redirect_document_id": false
43658+
},
43659+
{
43660+
"source_path": "articles/cognitive-services/translator/translator-text-container-config.md",
43661+
"redirect_url": "/azure/cognitive-services/translator/translator-info-overview",
43662+
"redirect_document_id": false
43663+
},
43664+
{
43665+
"source_path": "articles/aks/virtual-kubelet.md",
43666+
"redirect_url": "/azure/aks/concepts-scale#burst-to-azure-container-instances",
43667+
"redirect_document_id": false
4360543668
}
4360643669
]
4360743670
}

articles/active-directory-b2c/TOC.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -320,6 +320,9 @@
320320
href: active-directory-b2c-devquickstarts-graph-dotnet.md
321321
- name: Audit logs
322322
href: active-directory-b2c-reference-audit-logs.md
323+
- name: Manage users - Azure portal
324+
href: manage-users-portal.md
325+
displayName: create users, add users, delete users
323326
- name: Secure API Management API
324327
href: secure-api-management.md
325328
displayName: apim, api management, migrate, b2clogin.com
Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
---
2+
title: Create & delete Azure AD B2C consumer user accounts in the Azure portal
3+
description: Learn how to use the Azure portal to create and delete consumer users in your Azure AD B2C directory.
4+
services: active-directory-b2c
5+
author: mmacy
6+
manager: celestedg
7+
8+
ms.service: active-directory
9+
ms.workload: identity
10+
ms.topic: conceptual
11+
ms.date: 11/09/2019
12+
ms.author: marsma
13+
ms.subservice: B2C
14+
---
15+
16+
# Use the Azure portal to create and delete consumer users in Azure AD B2C
17+
18+
There might be scenarios in which you want to manually create consumer accounts in your Azure Active Directory B2C (Azure AD B2C) directory. Although consumer accounts in an Azure AD B2C directory are most commonly created when users sign up to use one of your applications, you can create them programmatically and by using the Azure portal. This article focuses on the Azure portal method of user creation and deletion.
19+
20+
To add or delete users, your account must be assigned the *User administrator* or *Global administrator* role.
21+
22+
[!INCLUDE [active-directory-b2c-public-preview](../../includes/active-directory-b2c-public-preview.md)]
23+
24+
## Types of user accounts
25+
26+
As described in [Overview of user accounts in Azure AD B2C](user-overview.md), there are three types of user accounts that can be created in an Azure AD B2C directory:
27+
28+
* Work
29+
* Guest
30+
* Consumer
31+
32+
This article focuses on working with **consumer accounts** in the Azure portal. For information about creating and deleting Work and Guest accounts, see [Add or delete users using Azure Active Directory](../active-directory/fundamentals/add-users-azure-active-directory.md).
33+
34+
## Create a consumer user
35+
36+
1. Sign in to the [Azure portal](https://portal.azure.com).
37+
1. Select the **Directory + subscription** filter in the top menu, and then select the directory that contains your Azure AD B2C tenant.
38+
1. In the left menu, select **Azure AD B2C**. Or, select **All services** and search for and select **Azure AD B2C**.
39+
1. Under **Manage**, select **Users**.
40+
1. Select **New user**.
41+
1. Select **Create Azure AD B2C user**.
42+
1. Choose a **Sign in method** and enter either an **Email** address or a **Username** for the new user. The sign in method you select here must match the setting you've specified for your Azure AD B2C tenant's *Local account* identity provider (see **Manage** > **Identity providers** in your Azure AD B2C tenant).
43+
1. Enter a **Name** for the user. This is typically the full name (given and surname) of the user.
44+
1. (Optional) You can **Block sign in** if you wish to delay the ability for the user to sign in. You can enable sign in later by editing the user's **Profile** in the Azure portal.
45+
1. Choose **Auto-generate password** or **Let me create password**.
46+
1. Specify the user's **First name** and **Last name**.
47+
1. Select **Create**.
48+
49+
Unless you've selected **Block sign in**, the user can now sign in using the sign in method (email or username) that you specified.
50+
51+
## Delete a consumer user
52+
53+
1. In your Azure AD B2C directory, select **Users**, and then select the user you want to delete.
54+
1. Select **Delete**, and then **Yes** to confirm the deletion.
55+
56+
For details about restoring a user within the first 30 days after deletion, or for permanently deleting a user, see [Restore or remove a recently deleted user using Azure Active Directory](../active-directory/fundamentals/active-directory-users-restore.md).
57+
58+
## Next steps
59+
60+
For automated user management scenarios, for example migrating users from another identity provider to your Azure AD B2C directory, see [Azure AD B2C: User migration](active-directory-b2c-user-migration.md).

articles/active-directory/authentication/TOC.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -139,8 +139,6 @@
139139
href: howto-authentication-passwordless-security-key.md
140140
- name: Passwordless Windows 10
141141
href: howto-authentication-passwordless-security-key-windows.md
142-
- name: Passwordless on-premises
143-
href: howto-authentication-passwordless-security-key-on-premises.md
144142
- name: Passwordless phone sign-in
145143
href: howto-authentication-passwordless-phone.md
146144
- name: Windows Hello for Business

articles/active-directory/authentication/howto-mfa-mfasettings.md

Lines changed: 12 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ ms.collection: M365-identity-device-management
1919

2020
This article helps you to manage Multi-Factor Authentication settings in the Azure portal. It covers various topics that help you to get the most out of Azure Multi-Factor Authentication. Not all of the features are available in every version of Azure Multi-Factor Authentication.
2121

22-
You can access settings related to Azure Multi-Factor Authentication from the Azure portal by browsing to **Azure Active Directory** > **MFA**.
22+
You can access settings related to Azure Multi-Factor Authentication from the Azure portal by browsing to **Azure Active Directory** > **Security** > **MFA**.
2323

2424
![Azure portal - Azure AD Multi-Factor Authentication settings](./media/howto-mfa-mfasettings/multi-factor-authentication-settings-portal.png)
2525

@@ -59,15 +59,15 @@ Use the _block and unblock users_ feature to prevent users from receiving authen
5959
### Block a user
6060

6161
1. Sign in to the [Azure portal](https://portal.azure.com) as an administrator.
62-
2. Browse to **Azure Active Directory** > **MFA** > **Block/unblock users**.
62+
2. Browse to **Azure Active Directory** > **Security** > **MFA** > **Block/unblock users**.
6363
3. Select **Add** to block a user.
6464
4. Select the **Replication Group**. Enter the username for the blocked user as **username\@domain.com**. Enter a comment in the **Reason** field.
6565
5. Select **Add** to finish blocking the user.
6666

6767
### Unblock a user
6868

6969
1. Sign in to the [Azure portal](https://portal.azure.com) as an administrator.
70-
2. Browse to **Azure Active Directory** > **MFA** > **Block/unblock users**.
70+
2. Browse to **Azure Active Directory** > **Security** > **MFA** > **Block/unblock users**.
7171
3. Select **Unblock** in the **Action** column next to the user to unblock.
7272
4. Enter a comment in the **Reason for unblocking** field.
7373
5. Select **Unblock** to finish unblocking the user.
@@ -79,7 +79,7 @@ Configure the _fraud alert_ feature so that your users can report fraudulent att
7979
### Turn on fraud alerts
8080

8181
1. Sign in to the [Azure portal](https://portal.azure.com) as an administrator.
82-
2. Browse to **Azure Active Directory** > **MFA** > **Fraud alert**.
82+
2. Browse to **Azure Active Directory** > **Security** > **MFA** > **Fraud alert**.
8383
3. Set the **Allow users to submit fraud alerts** setting to **On**.
8484
4. Select **Save**.
8585

@@ -121,7 +121,7 @@ You can use your own recordings or greetings for two-step verification with the
121121
Before you begin, be aware of the following restrictions:
122122

123123
* The supported file formats are .wav and .mp3.
124-
* The file size limit is 5 MB.
124+
* The file size limit is 1 MB.
125125
* Authentication messages should be shorter than 20 seconds. Messages that are longer than 20 seconds can cause the verification to fail. The user might not respond before the message finishes and the verification times out.
126126

127127
### Custom message language behavior
@@ -142,7 +142,7 @@ For example, if there is only one custom message, with a language of German:
142142
### Set up a custom message
143143

144144
1. Sign in to the [Azure portal](https://portal.azure.com) as an administrator.
145-
1. Browse to **Azure Active Directory** > **MFA** > **Phone call settings**.
145+
1. Browse to **Azure Active Directory** > **Security** > **MFA** > **Phone call settings**.
146146
1. Select **Add greeting**.
147147
1. Choose the type of greeting.
148148
1. Choose the language.
@@ -181,7 +181,7 @@ The _one-time bypass_ feature allows a user to authenticate a single time withou
181181
### Create a one-time bypass
182182

183183
1. Sign in to the [Azure portal](https://portal.azure.com) as an administrator.
184-
2. Browse to **Azure Active Directory** > **MFA** > **One-time bypass**.
184+
2. Browse to **Azure Active Directory** > **Security** > **MFA** > **One-time bypass**.
185185
3. Select **Add**.
186186
4. If necessary, select the replication group for the bypass.
187187
5. Enter the username as **username\@domain.com**. Enter the number of seconds that the bypass should last. Enter the reason for the bypass.
@@ -190,7 +190,7 @@ The _one-time bypass_ feature allows a user to authenticate a single time withou
190190
### View the one-time bypass report
191191

192192
1. Sign in to the [Azure portal](https://portal.azure.com).
193-
2. Browse to **Azure Active Directory** > **MFA** > **One-time bypass**.
193+
2. Browse to **Azure Active Directory** > **Security** > **MFA** > **One-time bypass**.
194194

195195
## Caching rules
196196

@@ -202,18 +202,20 @@ You can set a time period to allow authentication attempts after a user is authe
202202
### Set up caching
203203

204204
1. Sign in to the [Azure portal](https://portal.azure.com) as an administrator.
205-
2. Browse to **Azure Active Directory** > **MFA** > **Caching rules**.
205+
2. Browse to **Azure Active Directory** > **Security** > **MFA** > **Caching rules**.
206206
3. Select **Add**.
207207
4. Select the **cache type** from the drop-down list. Enter the maximum number of **cache seconds**.
208208
5. If necessary, select an authentication type and specify an application.
209209
6. Select **Add**.
210210

211211
## MFA service settings
212212

213-
Settings for app passwords, trusted IPs, verification options, and remember multi-factor authentication for Azure Multi-Factor Authentication can be found in service settings. Service settings can be accessed from the Azure portal by browsing to **Azure Active Directory** > **MFA** > **Getting started** > **Configure** > **Additional cloud-based MFA settings**.
213+
Settings for app passwords, trusted IPs, verification options, and remember multi-factor authentication for Azure Multi-Factor Authentication can be found in service settings. Service settings can be accessed from the Azure portal by browsing to **Azure Active Directory** > **Security** > **MFA** > **Getting started** > **Configure** > **Additional cloud-based MFA settings**.
214214

215215
![Azure Multi-Factor Authentication service settings](./media/howto-mfa-mfasettings/multi-factor-authentication-settings-service-settings.png)
216216

217+
The trusted IP address ranges can be private or public.
218+
217219
## App passwords
218220

219221
Some applications, like Office 2010 or earlier and Apple Mail before iOS 11, don't support two-step verification. The apps aren't configured to accept a second verification. To use these applications, take advantage of the _app passwords_ feature. You can use an app password in place of your traditional password to allow an app to bypass two-step verification and continue working.

articles/active-directory/authentication/howto-mfa-reporting.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,16 +21,16 @@ Azure Multi-Factor Authentication provides several reports that can be used by y
2121

2222
| Report | Location | Description |
2323
|:--- |:--- |:--- |
24-
| Blocked User History | Azure AD > MFA Server > Block/unblock users | Shows the history of requests to block or unblock users. |
24+
| Blocked User History | Azure AD > Security > MFA > Block/unblock users | Shows the history of requests to block or unblock users. |
2525
| Usage and fraud alerts | Azure AD > Sign-ins | Provides information on overall usage, user summary, and user details; as well as a history of fraud alerts submitted during the date range specified. |
26-
| Usage for on-premises components | Azure AD > MFA Server > Activity Report | Provides information on overall usage for MFA through the NPS extension, ADFS, and MFA server. |
27-
| Bypassed User History | Azure AD > MFA Server > One-time bypass | Provides a history of requests to bypass Multi-Factor Authentication for a user. |
28-
| Server status | Azure AD > MFA Server > Server status | Displays the status of Multi-Factor Authentication Servers associated with your account. |
26+
| Usage for on-premises components | Azure AD > Security > MFA > Activity Report | Provides information on overall usage for MFA through the NPS extension, ADFS, and MFA server. |
27+
| Bypassed User History | Azure AD > Security > MFA > One-time bypass | Provides a history of requests to bypass Multi-Factor Authentication for a user. |
28+
| Server status | Azure AD > Security > MFA > Server status | Displays the status of Multi-Factor Authentication Servers associated with your account. |
2929

3030
## View MFA reports
3131

3232
1. Sign in to the [Azure portal](https://portal.azure.com).
33-
2. On the left, select **Azure Active Directory** > **MFA Server**.
33+
2. On the left, select **Azure Active Directory** > **Security** > **MFA**.
3434
3. Select the report that you wish to view.
3535

3636
![MFA Server server status report in the Azure portal](./media/howto-mfa-reporting/report.png)

articles/active-directory/authentication/howto-sspr-writeback.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ To set up the appropriate permissions for password writeback to occur, complete
9696
* **Write pwdLastSet**
9797
9. Select **Apply/OK** to apply the changes and exit any open dialog boxes.
9898

99-
Since the source of authority is on premises, the password complexity policies apply from the same connected data source. Make sure you've changed the existing group policies for "Minimum Password Length". The group policy shouldn't be set to 1, which means password should be at least a day old before it can be updated. You need make sure it's set to 0. These settings can be found in `gpmc.msc` under **Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies**. Run `gpupdate /force` to ensure that the change takes effect.
99+
Since the source of authority is on premises, the password complexity policies apply from the same connected data source. Make sure you've changed the existing group policies for "Minimum password age". The group policy shouldn't be set to 1, which means password should be at least a day old before it can be updated. You need make sure it's set to 0. These settings can be found in `gpmc.msc` under **Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies**. Run `gpupdate /force` to ensure that the change takes effect.
100100

101101
## Next steps
102102

Loading

0 commit comments

Comments
 (0)