Azure Ad b2c:添加具有邀请的新成员用户 [英] Azure Ad b2c : Add new member user with invitation

问题描述

我在Azure上运行了 Azure Ad b2c ，我想在B2C中创建具有邀请的用户.我尝试创建来宾用户，但该用户无法登录.因为该用户被创建为B2B用户.

I have an Azure Ad b2c running up on Azure and I want to create user with inviations in B2C.I tried by creating Guest user but that user is unable to login. because that user is created as B2B user.

我也尝试过手动添加用户.但我无法添加自己的域. 例如. [e-mail] .但我想创建 [e-mail] .

I also tried by adding user manually. but I am not able to add my own domain. eg. [e-mail]. but I want to create [e-mail].

我在Google上进行了很多搜索，发现我必须为此添加一个自定义域.当我尝试这样做时，我发现必须在 DNS注册商中注册我的域.不久以后就不会运行了.

I googled it a lot and I found that i have to add a custom domain for that. when I tried to do so I found that I have to register my domain in DNS registrar. which is not run long in future.

我还遵循了有关堆栈溢出的相关问题.

I also followed the related question on stack overflow that is .

所以我想要的是，我通过和邀请添加了一个用户，并且应该允许该用户登录.

So what I want is , I add a user by and invitation and that user should be enable to login.

您能帮我摆脱这个问题吗?

Can you help me to get rid of this problem?

最近4天我都伤了头.

I am breaking my head for last 4 days.

非常感谢.

推荐答案

更简单的解决方案是

The easier solution is to create a local account in the Azure AD B2C directory through the Azure AD Graph API and then send an email message to the new user with instructions to "forget their password" which you have randomized.

更难的解决方案是使用自定义策略实现邀请流程.

The harder solution is to implement the invitation flow using a custom policy.

此邀请流程的描述这里.

This invitation flow is described here and implemented here.

邀请流通过通过Azure AD Graph API在Azure AD B2C目录中预先注册一个本地帐户，然后向该本地帐户的电子邮件地址发送签名的兑换链接来邀请新用户.

The invitation flow invites a new user by pre-registering a local account in the Azure AD B2C directory through the Azure AD Graph API and then sending a signed redemption link to the email address for this local account.

此兑换链接将新用户定向到密码重置策略.

This redemption link directs the new user to the password reset policy.

这篇关于Azure Ad b2c:添加具有邀请的新成员用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！