wip

Author: dlepow

articles/api-management/developer-portal-basic-authentication.md

@@ -0,0 +1,96 @@
+---
+title: Use basic authentication to developer portal
+titleSuffix: Azure API Management
+description: Learn how to set up user accounts to the developer portal in Azure API Management with username and password authentication.
+
+author: dlepow
+ms.service: api-management
+ms.topic: article
+ms.date: 08/30/2022
+ms.author: danlep
+---
+
+# Authenticate users of the developer portal by using usernames and passwords 
+
+In the developer portal for Azure API Management, the default authentication method for users is the provide a username and password. In this article, learn how to set up a user with basic authentication credentials to the developer portal
+
+
+In this article, you'll learn how to:
+> [!div class="checklist"]
+> * ... 
+
+
+## Prerequisites
+
+- Complete the [Create an Azure API Management instance](get-started-create-service-instance.md) quickstart.
+
+- [Import and publish](import-and-publish.md) an API in the Azure API Management instance.
+
+
+[!INCLUDE [premium-dev-standard.md](../../includes/api-management-availability-premium-dev-standard.md)]
+
+[!INCLUDE [api-management-navigate-to-instance.md](../../includes/api-management-navigate-to-instance.md)]
+
+
+## Confirm the Username and password provider
+
+By default, the Username and password identity provider is enabled in the developer portal. To confirm this setting:
+
+1. In the left menu of your API Management instance, under **Developer portal**, select **Identities**.
+1. In the **Provider type** list, confirm that **Username and password** appears.
+
+If the provider isn't already enabled, you can add it:
+
+1. In the left menu of your API Management instance, under **Developer portal**, select **Identities** > **+ Add**.
+1. Under **Type**, select **Username and password**, and then select **Add**.
+
+## Add a username and password
+
+There are two ways to add a username and password:
+
+* An API publisher can add a user through the Azure portal, or with equivalent Azure tools such as the [New-AzApiManagementUser](/powershell/module/az.apimanagement/new-azapimanagementuser) Azure PowerShell cmdlet. For steps using the portal, see [How to manage user accounts in Azure API Management](api-management-howto-create-or-invite-developers.md).
+
+* An API consumer (developer) can sign up directly in the developer portal, using the **Sign up** page.
+
+> [!NOTE]
+> API Management enforces password strength requirements including password length. When you add a user in the Azure portal, the password must be at least 6 characters long. When a developer signs up or resets a password through the developer portal, the password must be at least 8 characters long.
+
+
+
+## Delete the Username and password provider
+
+If you've configured another identity provider for the developer portal such as [Azure AD](api-management-howto-aad.md) or [Azure AD B2C](api-management-howto-aad-b2c.md), you might want to delete the Username password provider:
+
+1. In the left menu of your API Management instance, under **Developer portal**, select **Identities**.
+1. In the **Provider type** list, select **Username and password**. In the context menu (**...**), select **Delete**.
+
+
+## Next steps
+
+
+
+[api-management-dev-portal-signin]: ./media/api-management-howto-aad/api-management-dev-portal-signin.png
+[api-management-aad-signin]: ./media/api-management-howto-aad/api-management-aad-signin.png
+[api-management-complete-registration]: ./media/api-management-howto-aad/api-management-complete-registration.png
+[api-management-registration-complete]: ./media/api-management-howto-aad/api-management-registration-complete.png
+
+[How to add operations to an API]: ./mock-api-responses.md
+[How to add and publish a product]: api-management-howto-add-products.md
+[Monitoring and analytics]: api-management-monitoring.md
+[Add APIs to a product]: api-management-howto-add-products.md#add-apis
+[Publish a product]: api-management-howto-add-products.md#publish-product
+[Get started with Azure API Management]: get-started-create-service-instance.md
+[API Management policy reference]: ./api-management-policies.md
+[Caching policies]: ./api-management-policies.md#caching-policies
+[Create an API Management service instance]: get-started-create-service-instance.md
+
+[https://oauth.net/2/]: https://oauth.net/2/
+[WebApp-GraphAPI-DotNet]: https://github.com/AzureADSamples/WebApp-GraphAPI-DotNet
+
+[Prerequisites]: #prerequisites
+[Configure an OAuth 2.0 authorization server in API Management]: #step1
+[Configure an API to use OAuth 2.0 user authorization]: #step2
+[Test the OAuth 2.0 user authorization in the Developer Portal]: #step3
+[Next steps]: #next-steps
+
+[Sign in to the developer portal by using an Azure AD account]: #Sign-in-to-the-developer-portal-by-using-an-Azure-AD-account