Hotspot Question You have an Azure Active Directory (Azure AD) tenant and an Azure web app named App1. You need to provide guest users with self-service sign-up for App1. The solution must meet the…

Question

Answer Area

• One-time password:An identity provider
  A linked subscriptionAn identity providerAzure AD Privileged Identity Management (PIM)The External collaboration settings
• User details:A user flow
  A user flowAccess reviewsAn access packageThe tenant properties

Explanation

This question tests your knowledge of configuring Azure AD External Identities self-service sign-up user flows, specifically enabling one-time passcode (OTP) authentication and collecting custom user attributes during sign-up.

Approach. To enable guest users to sign up using a one-time password, you must navigate to Azure AD > External Identities > All identity providers and enable 'Email one-time passcode' (under the Email one-time passcode settings). This allows guests without existing Microsoft, Google, or social accounts to authenticate via a temporary code sent to their email. For collecting custom user attributes (first name, last name, city, and email address) during sign-up, you must configure a 'User flow' under Azure AD > External Identities > User flows. Within the user flow, you add the required attributes (First Name, Last Name, City, Email Address) under the 'User attributes' section, which presents these fields to the guest user during the self-service sign-up process for App1.

Concept tested. Azure AD External Identities self-service sign-up: enabling Email One-Time Passcode as an identity provider and configuring user flow attributes to collect specific guest user information during sign-up.

Reference. https://learn.microsoft.com/en-us/azure/active-directory/external-identities/self-service-sign-up-user-flow

No community discussion yet for this question.