You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/tutorial-create-tenant.md
+19-12Lines changed: 19 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Tutorial - Create an Azure Active Directory B2C tenant | Microsoft Docs
2
+
title: Tutorial - Create an Azure Active Directory B2C tenant
3
3
description: Learn how to prepare for registering your applications by creating an Azure Active Directory B2C tenant using the Azure portal.
4
4
services: B2C
5
5
author: mmacy
@@ -8,7 +8,7 @@ manager: celestedg
8
8
ms.service: active-directory
9
9
ms.workload: identity
10
10
ms.topic: conceptual
11
-
ms.date: 01/11/2019
11
+
ms.date: 06/07/2019
12
12
ms.author: marsma
13
13
ms.subservice: B2C
14
14
---
@@ -30,23 +30,28 @@ If you don't have an Azure subscription, create a [free account](https://azure.m
30
30
## Create an Azure AD B2C tenant
31
31
32
32
1. Sign in to the [Azure portal](https://portal.azure.com/).
33
-
2. Make sure that you are using the directory that contains your subscription by clicking the **Directory and subscription filter** in the top menu and choosing the directory that contains it. This directory is different from the one that will contain your Azure AD B2C tenant.
33
+
2. Make sure you're using the directory that contains your subscription. Click the **Directory and subscription filter** in the top menu, then select the directory that contains your subscription. This directory is different from the one that will contain your Azure AD B2C tenant.
34
34
35
-

35
+

36
36
37
37
3. Choose **Create a resource** in the top-left corner of the Azure portal.
38
38
4. Search for and select **Active Directory B2C**, and then click **Create**.
39
-
5. Choose **Create a new Azure AD B2C Tenant**, enter an organization name and initial domain name, which is used in the tenant name, select the country/region (it can't be changed later), and then click **Create**.
39
+
5. Choose **Create a new Azure AD B2C Tenant** and enter an organization name and initial domain name. Select the country/region (it can't be changed later), and then click **Create**.
40
40
41
-

41
+
The initial domain name is used as part of your tenant name. In this example, the tenant name is *contoso0926Tenant.onmicrosoft.com*:
42
42
43
-
In this example, the tenant name is contoso0926Tenant.onmicrosoft.com
43
+

44
44
45
-
6. On the **Create new B2C Tenant or Link to an exiting Tenant** page, choose **Link an existing Azure AD B2C Tenant to my Azure subscription**, select the tenant that you created, select your subscription, and then click **Create new**.
46
-
7. Enter a name for the resource group that will contain the tenant, select the location, and then click **Create**.
47
-
8. To start using your new tenant, make sure you are using the directory that contains your Azure AD B2C tenant by clicking the **Directory and subscription filter** in the top menu and choosing the directory that contains it.
45
+
6. On the **Create new B2C Tenant or Link to existing Tenant** page, choose **Link an existing Azure AD B2C Tenant to my Azure subscription**.
48
46
49
-

47
+
Select the tenant that you created, and select your subscription.
48
+
49
+
For resource group, select **Create new**. Enter a name for the resource group that will contain the tenant, select the location, and then click **Create**.
50
+
1. To start using your new tenant, make sure you're using the directory that contains your Azure AD B2C tenant by clicking the **Directory and subscription filter** in the top menu and choosing the directory that contains it.
51
+
52
+
If at first you don't see your new Azure B2C tenant in the list, refresh your browser window, then select the **Directory and subscription filter** again in the top menu.
53
+
54
+

50
55
51
56
## Next steps
52
57
@@ -56,5 +61,7 @@ In this article, you learned how to:
56
61
> * Create an Azure AD B2C tenant
57
62
> * Link your tenant to your subscription
58
63
64
+
Next, learn how to register a web application in your new tenant.
65
+
59
66
> [!div class="nextstepaction"]
60
-
> [Register your applications](tutorial-register-applications.md)
67
+
> [Register your applications >](tutorial-register-applications.md)
title: Tutorial - Create user flows - Azure Active Directory B2C | Microsoft Docs
3
-
description: Learn how to Create user flows for your applications in Azure Active Directory B2C using the Azure portal.
2
+
title: Tutorial - Create user flows - Azure Active Directory B2C
3
+
description: Learn how to create user flows in the Azure portal to enable sign up, sign in, and user profile editing for your applications in Azure Active Directory B2C.
4
4
services: active-directory-b2c
5
5
author: mmacy
6
6
manager: celestedg
7
7
8
8
ms.service: active-directory
9
9
ms.workload: identity
10
10
ms.topic: article
11
-
ms.date: 02/01/2019
11
+
ms.date: 06/07/2019
12
12
ms.author: marsma
13
13
ms.subservice: B2C
14
14
---
15
15
16
16
# Tutorial: Create user flows in Azure Active Directory B2C
17
17
18
-
In your applications, you may have [user flows](active-directory-b2c-reference-policies.md) that enable users to sign up, sign in, or manage their profile. You can create multiple user flows of different types in your Azure Active Directory (Azure AD) B2C tenant and use them in your applications as needed. User flows can be reused across applications.
18
+
In your applications you may have [user flows](active-directory-b2c-reference-policies.md) that enable users to sign up, sign in, or manage their profile. You can create multiple user flows of different types in your Azure Active Directory (Azure AD) B2C tenant and use them in your applications as needed. User flows can be reused across applications.
19
19
20
20
In this article, you learn how to:
21
21
@@ -24,92 +24,92 @@ In this article, you learn how to:
24
24
> * Create a profile editing user flow
25
25
> * Create a password reset user flow
26
26
27
-
This tutorial shows you how to create some recommended user flows by using the Azure portal. If you are looking for information about how to set up a resource owner password credentials (ROPC) flow in your application, see [Configure the resource owner password credentials flow in Azure AD B2C](configure-ropc.md).
27
+
This tutorial shows you how to create some recommended user flows by using the Azure portal. If you're looking for information about how to set up a resource owner password credentials (ROPC) flow in your application, see [Configure the resource owner password credentials flow in Azure AD B2C](configure-ropc.md).
28
28
29
29
If you don't have an Azure subscription, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
30
30
31
31
## Prerequisites
32
32
33
-
[Register your applications](tutorial-register-applications.md) that are part of the user flows you want to create.
33
+
[Register your applications](tutorial-register-applications.md) that are part of the user flows you want to create.
34
34
35
35
## Create a sign-up and sign-in user flow
36
36
37
37
The sign-up and sign-in user flow handles both sign-up and sign-in experiences with a single configuration. Users of your application are led down the right path depending on the context.
38
38
39
39
1. Sign in to the [Azure portal](https://portal.azure.com).
40
-
2. Make sure you're using the directory that contains your Azure AD B2C tenant by clicking the **Directory and subscription filter** in the top menu and choosing the directory that contains your tenant.
40
+
1. Make sure you're using the directory that contains your Azure AD B2C tenant by clicking the **Directory and subscription filter** in the top menu and choosing the directory that contains your tenant.
41
41
42
-

42
+

43
43
44
-
3. Choose **All services** in the top-left corner of the Azure portal, and then search for and select **Azure AD B2C**.
45
-
4. In the left menu, select **User flows**, and then select **New user flow**.
44
+
1. Choose **All services** in the top-left corner of the Azure portal, and then search for and select **Azure AD B2C**.
45
+
1. In the left menu under **Policies**, select **User flows (policies)**, and then select **New user flow**.
46
46
47
47

48
48
49
-
5. Select the **Sign-up and sign-in** user flow on the Recommended tab.
49
+
1. On the **Recommended** tab, select the **Signup and signin** user flow.
50
50
51
51

52
52
53
-
6. Enter a **Name** for the user flow. For example, *signupsignin1*.
54
-
7. For **Identity providers**, select **Email signup**.
53
+
1. Enter a **Name** for the user flow. For example, *signupsignin1*.
54
+
1. For **Identity providers**, select **Email signup**.
55
55
56
56

57
57
58
-
8. For **User attributes and claims**, choose the claims and attributes that you want to collect and send from the user during sign-up. For example, select **Show more**, and then choose **Country/Region**, **Display Name**, and **Postal Code**. Click **OK**.
58
+
1. For **User attributes and claims**, choose the claims and attributes that you want to collect and send from the user during sign-up. For example, select **Show more**, and then choose attributes and claims for**Country/Region**, **Display Name**, and **Postal Code**. Click **OK**.
59
59
60
60

61
61
62
-
9. Click **Create** to add the user flow. A prefix of *B2C_1* is automatically appended to the name.
62
+
1. Click **Create** to add the user flow. A prefix of *B2C_1* is automatically appended to the name.
63
63
64
64
### Test the user flow
65
65
66
-
1.On the Overview page of the user flow that you created, select **Run user flow**.
67
-
2. For **Application**, select the web application named *webapp1* that you previously registered. The **Reply URL** should show `https://jwt.ms`.
68
-
3. Click **Run user flow**, and then select **Sign up now**.
66
+
1.Select the user flow you created to open its overview page, then select **Run user flow**.
67
+
1. For **Application**, select the web application named *webapp1* that you previously registered. The **Reply URL** should show `https://jwt.ms`.
68
+
1. Click **Run user flow**, and then select **Sign up now**.
69
69
70
-

70
+

71
71
72
-
4. Enter a valid email address, click **Send verification code**, and then enter the verification code that you receive.
73
-
5. Enter a new password and confirm the password.
74
-
6. Enter the name that you want displayed, select your country and region, enter a postal code, and then click **Create**. The token is returned to `https://jwt.ms` and should be displayed to you.
75
-
7. You can now run the user flow again and you should be able to sign in with the account that you created. The returned token includes the claims that you selected of name, country/region, and postal code.
72
+
1. Enter a valid email address, click **Send verification code**, enter the verification code that you receive, then select **Verify code**.
73
+
1. Enter a new password and confirm the password.
74
+
1. Select your country and region, enter the name that you want displayed, enter a postal code, and then click **Create**. The token is returned to `https://jwt.ms` and should be displayed to you.
75
+
1. You can now run the user flow again and you should be able to sign in with the account that you created. The returned token includes the claims that you selected of country/region, name, and postal code.
76
76
77
77
## Create a profile editing user flow
78
78
79
79
If you want to enable users to edit their profile in your application, you use a profile editing user flow.
80
80
81
-
1. In the left menu, select **User flows**, and then select **New user flow**.
82
-
2. Select the **Profile editing** user flow on the Recommended tab.
83
-
3. Enter a **Name** for the user flow. For example, *profileediting1*.
84
-
4. For **Identity providers**, select **Local Account SignIn**.
85
-
5. For **User attributes**, choose the attributes that you want the customer to be able to edit in their profile. For example, select **Show more**, and then choose **Display Name** and **Job title**. Click **OK**.
86
-
6. Click **Create** to add the user flow. A prefix of *B2C_1* is automatically appended to the name.
81
+
1. In the left menu of the Azure AD B2C tenant overview page, select **User flows (policies)**, and then select **New user flow**.
82
+
1. Select the **Profile editing** user flow on the Recommended tab.
83
+
1. Enter a **Name** for the user flow. For example, *profileediting1*.
84
+
1. For **Identity providers**, select **Local Account SignIn**.
85
+
1. For **User attributes**, choose the attributes that you want the customer to be able to edit in their profile. For example, select **Show more**, and then choose both attributes and claims for **Display name** and **Job title**. Click **OK**.
86
+
1. Click **Create** to add the user flow. A prefix of *B2C_1* is automatically appended to the name.
87
87
88
88
### Test the user flow
89
89
90
-
1.On the Overview page of the user flow that you created, select **Run user flow**.
91
-
2. For **Application**, select the web application named *webapp1* that you previously registered. The **Reply URL** should show `https://jwt.ms`.
92
-
3. Click **Run user flow**, and then sign in with the account that you previously created.
93
-
4. You now have the opportunity to change the display name and job title for the user. Click **Continue**. The token is returned to `https://jwt.ms` and should be displayed to you.
90
+
1.Select the user flow you created to open its overview page, then select **Run user flow**.
91
+
1. For **Application**, select the web application named *webapp1* that you previously registered. The **Reply URL** should show `https://jwt.ms`.
92
+
1. Click **Run user flow**, and then sign in with the account that you previously created.
93
+
1. You now have the opportunity to change the display name and job title for the user. Click **Continue**. The token is returned to `https://jwt.ms` and should be displayed to you.
94
94
95
95
## Create a password reset user flow
96
96
97
-
It's possible for you to enable the user of your application to reset their password if needed. To enable password reset, you use a password reset user flow.
97
+
To enable users of your application to reset their password, you use a password reset user flow.
98
98
99
-
1. In the left menu, select **User flows**, and then select **New user flow**.
100
-
2. Select the **Password reset** user flow on the Recommended tab.
101
-
3. Enter a **Name** for the user flow. For example, *passwordreset1*.
102
-
4. For **Identity providers**, enable **Reset password using email address**.
103
-
5. Under Application claims, click **Show more** and choose the claims that you want returned in the authorization tokens sent back to your application. For example, select **User's Object ID**.
104
-
6. Click **OK**.
105
-
7. Click **Create** to add the user flow. A prefix of *B2C_1* is automatically appended to the name.
99
+
1. In the left menu, select **User flows (policies)**, and then select **New user flow**.
100
+
1. Select the **Password reset** user flow on the Recommended tab.
101
+
1. Enter a **Name** for the user flow. For example, *passwordreset1*.
102
+
1. For **Identity providers**, enable **Reset password using email address**.
103
+
1. Under Application claims, click **Show more** and choose the claims that you want returned in the authorization tokens sent back to your application. For example, select **User's Object ID**.
104
+
1. Click **OK**.
105
+
1. Click **Create** to add the user flow. A prefix of *B2C_1* is automatically appended to the name.
106
106
107
107
### Test the user flow
108
108
109
-
1.On the Overview page of the user flow that you created, select **Run user flow**.
110
-
2. For **Application**, select the web application named *webapp1* that you previously registered. The **Reply URL** should show `https://jwt.ms`.
111
-
3. Click **Run user flow**, and then sign in with the account that you previously created.
112
-
4. You now have the opportunity to change the password for the user. Click**Continue**. The token is returned to `https://jwt.ms` and should be displayed to you.
109
+
1.Select the user flow you created to open its overview page, then select **Run user flow**.
110
+
1. For **Application**, select the web application named *webapp1* that you previously registered. The **Reply URL** should show `https://jwt.ms`.
111
+
1. Click **Run user flow**, verify the email address of the account that you previously created, and select **Continue**.
112
+
1. You now have the opportunity to change the password for the user. Change the password and select**Continue**. The token is returned to `https://jwt.ms` and should be displayed to you.
113
113
114
114
## Next steps
115
115
@@ -120,5 +120,7 @@ In this article, you learned how to:
120
120
> * Create a profile editing user flow
121
121
> * Create a password reset user flow
122
122
123
+
Next, learn about adding identity providers to your applications to enable user sign-in with providers like Azure AD, Amazon, Facebook, GitHub, LinkedIn, Microsoft, or Twitter.
124
+
123
125
> [!div class="nextstepaction"]
124
-
> [Add identity providers to your applications in Azure Active Directory B2C](tutorial-add-identity-providers.md)
126
+
> [Add identity providers to your applications >](tutorial-add-identity-providers.md)
0 commit comments