Sharon demonstrates how to create a business to consumer (B2C) Azure Directory to securely allow external partners access to your SaaS applications.
- [Instructor] Not only can you manage your own users within Azure Active Directory, you can also create a B2C, or business to consumer, directory for consumer contacts. Azure Active Directory B2C allows you to manage your consumer access, and identity to your applications. Remember back in the olden days of 2016, if you wanted to allow your outside users access to an application, you would create a separate database to store names and passwords. B2C removes that requirement.
You can also have your users identify using social networks, such as Facebook, Google, and LinkedIn. Let's take a look at how we create a B2C Active Directory within Azure. As of today, the easiest way to create a B2C directory is to do it through the classic portal. As you can see, I've logged into Azure, and to access the classic portal, the easiest and fastest way to do it is to actually click Classic portal. You can use any service that has a square and the arrow on it. That indicates classic portal.
I've logged back into Azure with my main account, and again this just has to do with the limitation of my accounts and how they're configured. You'll see here that I already have three active directories already configured. I'm going to go ahead and add a B2C directory. To do so, click on New way down at the bottom, and then Directory, and Custom Create. You're going to need to provide a name. I'm going to use my Star Trek theme again in this demo.
One thing I want to point out here is that you have to come up with a unique domain name because you'll be using the domain space .onmicrosoft.com. So someone's already used StarTrekNG. There we go, we'll use NextGen. Select your country or region, and then we're going to check that this is a B2C directory. We have a warning that this B2C directory could take up to two minutes to be provisioned, and go ahead and click the checkbox.
If you haven't used the classic portal, this will look a little different. Now that our new directory has been created, I'm going to go ahead and take a look at it. So the first thing you're going to want to do is click on Manage B2C settings. As soon as you click that, you'll be put back into the new portal. I do have a warning right off the top that I do not have a subscription associated with this Azure Active Directory B2C. I do not have a subscription associated with this B2C directory.
I'm going to run through the demo with this error because I do not want to associate with a subscription. In the real world, you would definitely do that because you will be billed for it. That's all there is to it. The setup of B2C directory within Azure. The key here to remember, as of today in February 2017, we still have to create it via the classic portal.
- Azure AD
- Adding company branding
- Adding a custom domain
- AD Connect configuration
- AD Connect Health
- Administering users and groups
- Configuring SaaS applications
- Granting conditional access
- Revoking access
- Application proxy and discovery
- Integrating web and desktop applications
- Creating an Azure AD B2C directory
- Registering an application
- Creating a Microsoft identity