Skip to content

Commit 92f0ec2

Browse files
authored
Merge pull request #228167 from OWinfreyATL/owinfreyATL-Entitlement-Management-EntraIDs
Verified IDs added to entitlement management access packages.
2 parents 0a82bd4 + 09608a2 commit 92f0ec2

File tree

2 files changed

+10
-1
lines changed

2 files changed

+10
-1
lines changed

articles/active-directory/governance/entitlement-management-access-package-first.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ A resource directory has one or more resources to share. In this step, you creat
6969
| **Admin1** | Global administrator, or User administrator. This user can be the user you're currently signed in. |
7070
| **Requestor1** | User |
7171

72-
4. [Create an Azure AD security group](../fundamentals/active-directory-groups-create-azure-portal.md) named **Marketing resources** with a membership type of **Assigned**. This group will be the target resource for entitlement management. The group should be empty of members to start.
72+
4. [Create an Azure AD security group](../fundamentals/active-directory-groups-create-azure-portal.md) named **Marketing resources** with a membership type of **Assigned**. This group is the target resource for entitlement management. The group should be empty of members to start.
7373

7474

7575
## Step 2: Create an access package
@@ -142,6 +142,15 @@ An *access package* is a bundle of resources that a team or project needs and is
142142

143143
1. For **Enable requests**, select **Yes** to enable this access package to be requested as soon as it's created.
144144

145+
1. To add a Verified ID requirement to the access package, select on **Add issuer** in the **Required Verified IDs** section. If you don't have the Verified ID service set up in your tenant, navigate to the **Verified ID** section of the Azure portal.
146+
147+
:::image type="content" source="media/entitlement-management-access-package-first/verified-id-picker.png" alt-text="Screenshot of the Verified ID picker selection.":::
148+
149+
1. Search for an issuer in the dropdown and select the credential type you want users to present when requesting access.
150+
151+
> [!NOTE]
152+
> If you select multiple issuers / credential types, users requesting access will be required to present **all** of the credential types you have included in this policy. To give users the option of presenting one of many credential types, please include each acceptable option in a separate policy.
153+
145154
1. Select **Next** to open the **Requestor information** tab.
146155

147156
![Screenshots of the requests tab approval and enable requests settings.](./media/entitlement-management-access-package-first/requests-approval-enable.png)
323 KB
Loading

0 commit comments

Comments
 (0)