You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Quickstart: Add guest users to your directory in the Azure portal
19
18
20
-
You can invite anyone to collaborate with your organization by adding them to your directory as a guest user. Then you can either send an invitation email that contains a redemption link or send a direct link to an app you want to share. Guest users can sign in with their own work, school, or social identities. Along with this quickstart, you can learn more about adding guest users [in the Azure portal](add-users-administrator.md), via [PowerShell](b2b-quickstart-invite-powershell.md), or [in bulk](tutorial-bulk-invite.md).
19
+
With Azure AD [B2B collaboration](what-is-b2b.md), you can invite anyone to collaborate with your organization by using their own work, school, or social account. In this quickstart, you'll learn how to add a new guest user to your Azure AD directory in the Azure portal. You'll also send an invitation and see what the guest user's invitation redemption process looks like. In addition to this quickstart, you can learn more about adding guest users [in the Azure portal](add-users-administrator.md), via [PowerShell](b2b-quickstart-invite-powershell.md), or [in bulk](tutorial-bulk-invite.md).
21
20
22
-
In this quickstart, you'll add a new guest user to your Azure AD directory via the Azure portal, send an invitation, and see what the guest user's invitation redemption process looks like.
23
21
24
22
If you don’t have an Azure subscription, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
25
23
26
24
## Prerequisites
27
25
28
26
To complete the scenario in this tutorial, you need:
29
27
30
-
- A role that allows you to create users in your tenant directory, like the Global Administrator role or any of the limited administrator directory roles such as guest inviter or user administrator.
31
-
- A valid email account that you can add to your tenant directory, and that you can use to receive the test invitation email.
28
+
- A role that allows you to create users in your tenant directory, like the Global Administrator role or any of the limited administrator directory roles, such as Guest inviter or User administrator.
29
+
30
+
- Access to a valid email address outside of your Azure AD tenant, such as a separate work, school, or social email address. You'll use this email to create the guest account in your tenant directory and access the invitation.
32
31
33
32
## Add a new guest user in Azure AD
34
33
35
-
1. Sign in to the [Azure portal](https://portal.azure.com/) as an Azure AD administrator.
36
-
2. In the left pane, select **Azure Active Directory**.
37
-
3. Under **Manage**, select **Users**.
34
+
1. Sign in to the [Azure portal](https://portal.azure.com/) with an account that's been assigned the Global administrator, Guest, inviter, or User administrator role.
35
+
36
+
1. Under **Azure services**, select **Azure Active Directory** (or use the search box to find and select **Azure Active Directory**).
37
+
38
+
39
+
40
+
1. Under **Manage**, select **Users**.
38
41
39
42
40
43
41
-
4. Select **New guest user**.
44
+
1.Select **New guest user**.
42
45
43
-
46
+
44
47
45
-
5. On the **New user** page, select **Invite user** and then add the guest user's information.
48
+
1. On the **New user** page, select **Invite user** and then add the guest user's information.
46
49
47
50
-**Name.** The first and last name of the guest user.
48
51
-**Email address (required)**. The email address of the guest user.
49
52
-**Personal message (optional)** Include a personal welcome message to the guest user.
50
53
-**Groups**: You can add the guest user to one or more existing groups, or you can do it later.
51
-
-**Directory role**: If you require Azure AD administrative permissions for the user, you can add them to an Azure AD role.
54
+
-**Roles**: If you require Azure AD administrative permissions for the user, you can add them to an Azure AD role.
55
+
56
+
52
57
53
-
6. Select **Invite** to automatically send the invitation to the guest user. A notification appears in the upper right with the message **Successfully invited user**.
54
-
7. After you send the invitation, the user account is automatically added to the directory as a guest.
58
+
1. Select **Invite** to automatically send the invitation to the guest user. A notification appears in the upper right with the message **Successfully invited user**.
55
59
56
-
## Assign an app to the guest user
57
-
Add the Salesforce app to your test tenant and assign the test guest user to the app.
58
-
1. Sign in to the Azure portal as an Azure AD administrator.
59
-
2. In the left pane, select **Enterprise applications**.
60
-
3. Select **New application**.
61
-
4. Under **Add from the gallery**, search for **Salesforce**, and then select it.
60
+
1. After you send the invitation, the user account is automatically added to the directory as a guest.
62
61
63
-
64
-
5. Select **Add**.
65
-
6. Under **Manage**, select **Single sign-on**, and under **Single Sign-on Mode**, select **Password-based Sign-on**, and click **Save**.
66
-
7. Under **Manage**, select **Users and groups** > **Add user** > **Users and groups**.
67
-
8. Use the search box to search for the test user (if necessary) and select the test user in the list. Then click **Select**.
68
-
9. Select **Assign**.
62
+
69
63
70
64
## Accept the invitation
65
+
71
66
Now sign in as the guest user to see the invitation.
72
-
1. Sign in to your test guest user's email account.
73
-
2. In your inbox, find the "You're invited" email.
67
+
68
+
1. Sign in to your test guest user's email account.
69
+
70
+
1. In your inbox, open the email from "Microsoft Invitations on behalf of Contoso."
74
71
75
72
76
73
77
-
3. In the email body, select **Get Started**. A **Review permissions** page opens in the browser.
78
74
79
-
75
+
1. In the email body, select **Accept invitation**. A **Review permissions** page opens in the browser.
76
+
77
+
80
78
81
-
4. Select **Accept**. The Access Panel opens, which lists the applications the guest user can access.
79
+
1. Select **Accept**.
80
+
81
+
1. The **My Apps** page opens. Because we haven't assigned any apps to this guest user, you'll see the message "There are no apps to show." In a real-life scenario, you would [add the guest user to an app](add-users-administrator.md#add-guest-users-to-an-application) so the app would appear here.
82
82
83
83
## Clean up resources
84
-
When no longer needed, delete the test guest user and the test app.
85
-
1. Sign in to the Azure portal as an Azure AD administrator.
86
-
2. In the left pane, select **Azure Active Directory**.
87
-
3. Under **Manage**, select **Enterprise applications**.
88
-
4. Open the application **Salesforce**, and then select **Delete**.
89
-
5. In the left pane, select **Azure Active Directory**.
90
-
6. Under **Manage**, select **Users**.
91
-
7. Select the test user, and then select **Delete user**.
84
+
85
+
When no longer needed, delete the test guest user.
86
+
87
+
1. Sign in to the [Azure portal](https://portal.azure.com/) with an account that's been assigned the Global administrator, Guest, inviter, or User administrator role.
88
+
1. Select the **Azure Active Directory** service.
89
+
1. Under **Manage**, select **Users**.
90
+
1. Select the test user, and then select **Delete user**.
92
91
93
92
## Next steps
94
-
In this tutorial, you created a guest user in the Azure portal, and sent an invitation to share apps. Then you viewed the redemption process from the guest user's perspective and verified that the app appeared on the guest user's Access Panel. To learn more about adding guest users for collaboration, see [Add Azure Active Directory B2B collaboration users in the Azure portal](add-users-administrator.md).
93
+
In this tutorial, you created a guest user in the Azure portal, and sent an invitation to share apps. Then you viewed the redemption process from the guest user's perspective and verified that the guest user was able to access their My Apps page. To learn more about adding guest users for collaboration, see [Add Azure Active Directory B2B collaboration users in the Azure portal](add-users-administrator.md).
0 commit comments