You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/partner-grit-iam.md
+9-20Lines changed: 9 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -30,24 +30,22 @@ To get started, ensure the following prerequisites are met:
30
30
31
31
- A Grit IAM account. You can go to [Grit IAM B2B2C solution](https://www.gritiam.com/b2b2c) to get a demo.
32
32
- An Azure AD subscription. If you don't have one, you can create a [free Azure account](https://azure.microsoft.com/free/).
33
-
- An Azure AD B2C tenant linked to the Azure subscription. You can learn more at [Tutorial: Create an Azure Active Directory B2C tenant](tutorial-create-tenant.md).
34
-
33
+
- An Azure AD B2C tenant linked to the Azure subscription. You can learn more at [Tutorial: Create an Azure Active Directory B2C tenant](tutorial-create-tenant.md).
34
+
- Configure your application in the Azure portal.
35
+
- In the Grit Onboarding portal, create a super admin for the tenant.
35
36
36
37
## Scenario description
37
38
38
39
Contoso does business with end customers and large enterprises, like Fabrikam_big1 and Fabrikam_big2. There're small enterprise customers like Fabrikam_small1 and Fabrikam_small2 and direct business is done with end customers like Smith1 and Smith2.
39
40
40
-
41
41
*Contoso* has web and mobile applications and develops new applications. The applications rely on user shared profile data such as, first name, last name, address, and email. They want to centralize the profile data, so applications aren't collecting and storing the data. They want to store the profile information in accordance with certain compliance and regulations.
42
42
43
-
44
43

45
44
46
45
This integration is composed of the following components:
47
46
48
47
-**Azure AD B2C Identity Experience Framework (IEF)**: An engine that executes user journeys, which can include validating credentials, performing MFA, checking user access. It's aided by the Azure AD database and the API layer, which's configured using XML.
49
48
50
-
51
49
-**Grit API layer**: This layer exposes user profile data and metadata about organizations and applications. The data is stored in Azure AD and Cosmos DB.
52
50
53
51
-**Grit Onboarding portal**: Used by admins to onboard applications and organizations.
@@ -70,18 +68,17 @@ Use the guidance provided in the following sections to get started with configur
70
68
71
69
### Step 1 - Setup infrastructure
72
70
73
-
74
71
To get started with setup:
75
72
76
73
- Contact [Grit support](mailto:[email protected]) to obtain access.
77
-
- For evaluation, the infrastructure is deployed in the Grit Azure subscription and you'll be given admin rights.
78
-
- After the solution is purchased, Grit engineers install the dev, test, and production version in your Azure subscription.
74
+
- For evaluation, the Grit support team will deploy the infrastructure in the Grit Azure subscription and they'll give you admin rights.
75
+
- After you purchase the solution, Grit engineers will install the production version in your Azure subscription.
79
76
- The infrastructure integrates with your virtual network (VNet) setup, supports APIM (third-party API management) and the firewall.
80
-
-Implementation engineers can provide custom recommendations based on your infrastructure.
77
+
-Grit implementation engineers can provide custom recommendations based on your infrastructure.
81
78
82
79
### Step 2 - Create admins in the Admin Portal
83
80
84
-
The Grit Admin portal is to assign administrators access to the portal where they can perform the following tasks -
81
+
Use the Grit Admin portal to assign administrators access to the portal where they can perform the following tasks -
85
82
86
83
- Add other admins such as super, organization, application admin in the hierarchy depending on their permission level.
87
84
@@ -95,27 +92,19 @@ To learn how to assign admin roles, check the [tutorial.](https://app.archbee.co
95
92
96
93
Use the Onboarding portal for one or more of your customers and their identity provider (IdP) that supports OpenID Connect (OIDC) and SAML. Onboard customers without an IdP, for local account authentication. For B2C applications, enable social authentications.
97
94
98
-
99
-
Make sure you've Azure portal tenant access and the application is configured in the Azure portal.
100
-
101
-
102
-
>[!NOTE]
103
-
>To provide a walk-through or demo, some applications are pre-configured in the Azure AD tenant of the Onboarding portal.
104
-
105
95
The Onboarding portal defines the claims per application and per organization. Thereafter, the portal creates an endpoint URL for the sign-in and sign-up user flow.
106
96
107
-
108
97
To learn how to onboard an organization, check this [tutorial](https://app.archbee.com/doc/G_YZFq_VwvgMlmX-_efmX/8m90WVb2M6Yi0gCe7yor2).
109
98
110
99
### Step 4 - Integrate applications using OIDC or SAML
111
100
112
-
The Grit Onboarding portal provides URLs to onboard the applications after onboarding a customer.
101
+
After you onboard the customer, the Grit Onboarding portal provides URLs to onboard the applications.
113
102
114
103
Learn [how your customers can sign up, sign in, and manage their profiles](add-sign-up-and-sign-in-policy.md?pivots=b2c-custom-policy).
115
104
116
105
## Test the scenarios
117
106
118
-
Run through the authentication scenariosin the applications. Ensure there's a super admin for the tenant. You can use the Admin portal to change roles and user properties. Provide delegated access to Admin portal by inviting users.
107
+
Check the authentication [scenarios](## Scenario description) in your applications. Use the Grit Admin portal to change roles and user properties. Provide delegated access to Admin portal by inviting users.
0 commit comments