You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As an administrator, you can [reset a user's password](manage-users-portal.md#reset-a-users-password) if the user forgets their password. Or you would like to force them to reset the password. In this article, you'll learn how to force a password reset in these scenarios.
22
+
> [!IMPORTANT]
23
+
> Force password reset is a public preview feature of Azure AD B2C. For more information about previews, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
23
24
24
25
## Overview
26
+
As an administrator, you can [reset a user's password](manage-users-portal.md#reset-a-users-password) if the user forgets their password. Or you would like to force them to reset the password. In this article, you'll learn how to force a password reset in these scenarios.
25
27
26
-
When an administrator resets a user's password via the Azure portal, the value of the [forceChangePasswordNextSignIn](user-profile-attributes.md#password-profile-property) attribute is set to `true`.
27
-
28
-
The [sign-in and sign-up journey](add-sign-up-and-sign-in-policy.md) checks the value of this attribute. After the user completes the sign-in, if the attribute is set to `true`, the user must reset their password. Then the value of the attribute is set to back `false`.
28
+
When an administrator resets a user's password via the Azure portal, the value of the [forceChangePasswordNextSignIn](user-profile-attributes.md#password-profile-property) attribute is set to `true`. The [sign-in and sign-up journey](add-sign-up-and-sign-in-policy.md) checks the value of this attribute. After the user completes the sign-in, if the attribute is set to `true`, the user must reset their password. Then the value of the attribute is set to back `false`.
The password reset flow is applicable to local accounts in Azure AD B2C that use an [email address](identity-provider-local.md#email-sign-in) or [username](identity-provider-local.md#username-sign-in) with a password for sign-in.
33
33
34
+
::: zone pivot="b2c-user-flow"
35
+
34
36
### Force a password reset after 90 days
35
37
36
38
As an administrator, you can set a user's password expiration to 90 days, using [MS Graph](microsoft-graph-operations.md). After 90 days, the value of [forceChangePasswordNextSignIn](user-profile-attributes.md#password-profile-property) attribute is automatically set to `true`. For more information on how to set a user's password expiration policy, see [Password policy attribute](user-profile-attributes.md#password-policy-attribute).
@@ -43,8 +45,6 @@ Once a password expiration policy has been set, you must also configure force pa
43
45
44
46
## Configure your policy
45
47
46
-
::: zone pivot="b2c-user-flow"
47
-
48
48
To enable the **Forced password reset** setting in a sign-up or sign-in user flow:
49
49
50
50
1. Sign in to the [Azure portal](https://portal.azure.com).
@@ -75,23 +75,7 @@ To enable the **Forced password reset** setting in a sign-up or sign-in user flo
75
75
76
76
::: zone pivot="b2c-custom-policy"
77
77
78
-
1. Get the example of a force password reset on [GitHub](https://github.com/azure-ad-b2c/samples/tree/master/policies/force-password-reset).
79
-
1. In each file, replace the string `yourtenant` with the name of your Azure AD B2C tenant. For example, if the name of your B2C tenant is *contosob2c*, all instances of `yourtenant.onmicrosoft.com` become `contosob2c.onmicrosoft.com`.
80
-
1. Upload the policy files in the following order: the extension policy `TrustFrameworkExtensionsCustomForcePasswordReset.xml`, then the relying party policy `SignUpOrSigninCustomForcePasswordReset.xml`.
81
-
82
-
### Test the policy
83
-
84
-
1. Sign in to the [Azure portal](https://portal.azure.com) as a user administrator or a password administrator. For more information about the available roles, see [Assigning administrator roles in Azure Active Directory](../active-directory/roles/permissions-reference.md#all-roles).
85
-
1. Select the **Directory + Subscription** icon in the portal toolbar, and then select the directory that contains your Azure AD B2C tenant.
86
-
1. In the Azure portal, search for and select **Azure AD B2C**.
87
-
1. Select **Users**. Search for and select the user you'll use to test the password reset, and then select **Reset Password**.
88
-
1. In the Azure portal, search for and select **Azure AD B2C**.
89
-
1. Under **Policies**, select **Identity Experience Framework**.
90
-
1. Select the `B2C_1A_signup_signin_Custom_ForcePasswordReset` policy to open it.
91
-
1. For **Application**, select a web application that you [previously registered](tutorial-register-applications.md). The **Reply URL** should show `https://jwt.ms`.
92
-
1. Select the **Run now** button.
93
-
1. Sign in with the user account for which you reset the password.
94
-
1. You now must change the password for the user. Change the password and select **Continue**. The token is returned to `https://jwt.ms` and should be displayed to you.
78
+
This feature is currently only available for User Flows. For setup steps, choose **User Flow** above.
Copy file name to clipboardExpand all lines: articles/active-directory/authentication/concept-sspr-howitworks.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -69,7 +69,7 @@ To get started with SSPR, complete the following tutorial:
69
69
70
70
## Require users to register when they sign in
71
71
72
-
You can enable the option to require a user to complete the SSPR registration if they sign in to any applications using Azure AD. This workflow includes the following applications:
72
+
You can enable the option to require a user to complete the SSPR registration if they use modern authentication or web browser to sign in to any applications using Azure AD. This workflow includes the following applications:
Copy file name to clipboardExpand all lines: articles/active-directory/user-help/my-apps-portal-user-collections.md
+5-7Lines changed: 5 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Collections (preview) in the My Apps portal - Azure AD
2
+
title: Organize apps into collections in the My Apps portal - Azure AD
3
3
description: Learn how to create, edit, delete, hide, and show app collections in My Apps.
4
4
services: active-directory
5
5
author: curtand
@@ -8,19 +8,17 @@ ms.service: active-directory
8
8
ms.subservice: user-help
9
9
ms.workload: identity
10
10
ms.topic: end-user-help
11
-
ms.date: 01/19/2021
11
+
ms.date: 04/07/2021
12
12
ms.author: curtand
13
13
ms.reviewer: kasimpso
14
14
ms.custom: "user-help, seo-update-azuread-jan"
15
15
---
16
16
17
17
18
-
# User collections (preview) in My Apps
18
+
# Organize apps using collections from My Apps
19
19
20
20
My Apps is your one-stop shop for launching and managing all of your work or school apps. Create collections to organize your apps and make it easier to find the apps you need.
@@ -51,7 +49,7 @@ In this article, you’ll learn how to:
51
49
52
50
:::image type="content" source="media/my-apps-portal-user-collections/3-add-apps.png" alt-text="Adding apps from the list to your collection":::
53
51
54
-
1. On the following you can reorder or delete apps, or select **Add apps** to select more apps for the collection. When you’re happy with your choices, select **Create new**.
52
+
1. On the **Create new** pane you can reorder or delete apps, or select **Add apps** to select more apps for the collection. When you’re happy with your choices, select **Create new**.
55
53
56
54
:::image type="content" source="media/my-apps-portal-user-collections/4-create-button.png" alt-text="Select the Create new button to save the collection to My Apps":::
57
55
@@ -83,7 +81,7 @@ You can only edit collections you created. To edit a collection you already crea
83
81
84
82
:::image type="content" source="media/my-apps-portal-user-collections/9-manage-apps-again.png" alt-text="Use the Manage command to manage your apps":::
85
83
86
-
1. From here you can set the order in which collections appear in My Apps. The collection at th top of the list will be the default collection you see every time you go to myapps.microsoft.com.
84
+
1. From here you can set the order in which collections appear in My Apps. The collection at the top of the list will be the default collection you see every time you go to myapps.microsoft.com.
87
85
88
86
:::image type="content" source="media/my-apps-portal-user-collections/10-default-collection.png" alt-text="My Apps now contains your new collection":::
> | images | resource group | 1-80 | Alphanumerics, underscores, periods, and hyphens.<br><br>Start with alphanumeric. End with alphanumeric or underscore. |
174
174
> | snapshots | resource group | 1-80 | Alphanumerics, underscores, periods, and hyphens.<br><br>Start with alphanumeric. End with alphanumeric or underscore. |
175
-
> | virtualMachines | resource group | 1-15 (Windows)<br>1-64 (Linux)<br><br>See note below. | Can't use space or these characters:<br> `\/"'[]:|<>+=;,?*@&_`<br><br>Windows VMs can't include period or end with hyphen.<br><br>Linux VMs can't end with period or hyphen. |
176
-
> | virtualMachineScaleSets | resource group | 1-15 (Windows)<br>1-64 (Linux)<br><br>See note below. | Can't use space or these characters:<br> `\/"'[]:|<>+=;,?*@&`<br><br>Can't start with underscore. Can't end with period or hyphen. |
175
+
> | virtualMachines | resource group | 1-15 (Windows)<br>1-64 (Linux)<br><br>See note below. | Can't use space or these characters:<br> `~ ! @ # $ % ^ & * ( ) = + _ [] { } \| ; : . ' " , < > / ?`<br><br>Windows VMs can't include period or end with hyphen.<br><br>Linux VMs can't end with period or hyphen. |
176
+
> | virtualMachineScaleSets | resource group | 1-15 (Windows)<br>1-64 (Linux)<br><br>See note below. | Can't use space or these characters:<br> `~ ! @ # $ % ^ & * ( ) = + _ [] { } \| ; : . ' " , < > / ?`<br><br>Can't start with underscore. Can't end with period or hyphen. |
177
177
178
178
> [!NOTE]
179
179
> Azure virtual machines have two distinct names: resource name and host name. When you create a virtual machine in the portal, the same value is used for both names. The restrictions in the preceding table are for the host name. The actual resource name can have up to 64 characters.
0 commit comments