简而言之：如何设置Azure B2C预先创建用户并邀请他们设置其初始密码（而不是将其重置）。
我们有一个组织可以支付的公共网站，并使他们可以访问自己的区域。我们将一个或多个用户的电子邮件地址添加到我们的数据库中，以授予他们登录。组织的特权用户可以邀请其他用户授予他们访问组织区域的访问。
我们希望将身份验证，会话和密码管理从家庭成长的解决方案转移到Azure AD B2C。
一个新用户目前收到一封友好的邀请电子邮件，其中包含一个令牌，该链接包含一个令牌，允许他们设置密码。
我们可以创建一个自定义政策来处理此问题，但由于它们的复杂性和保质期，我真的不想走这条路线。
我发现“开箱即用”的唯一方法是在Azure AD中创建用户（这不是问题），设置临时密码并通过电子邮件发送给他们邀请，要求他们“重置”其密码。重置零件非常不洁，因为它们没有重置密码，他们正在设置其初始密码，这会令人困惑。
另请注意，我们不希望用户能够将其电子邮件更改为Hotmail帐户之类的内容，因为管理员必须负责此操作以确保他们使用其工作电子邮件。
In short: how to set up Azure B2C to pre-create users and invite them to set their initial password (rather than reset it).
We have public facing website that an organisation can pay for and it gives them access to their own area. We add one or more user's email addresses to our database to grant them a login. Privileged users at the organisation can invite other users to grant them access to their organisation's area.
We wish to move our authentication, session and password management from a home grown solution to Azure AD B2C.
A new user currently receives a friendly invitation email with a hyperlink that contains a token that gives them permission to set their password.
We could create a custom policy to handle this but I really don't want to go down that route due to their complexity and shelf life.
The only way that I've found "out of the box" is to create the user in Azure AD (not problem with that), set a temporary password and email them an invite asking them to "reset" their password. The reset part is very unclean as they are not resetting their password, they are setting their initial password and this will be confusing.
Also note that we do not want the user to be able to change their email to something like a hotmail account, as the admin must be in charge of this to ensure they use their work email.
发布评论
评论（1）
•在您的情况下，我建议您在Azure AD B2C中配置应用程序注册，并在其中配置用户流以重置每个用户登录的密码。另外，
在Azure AD B2C中注册应用程序时，您可以仅在此组织目录中选择'帐户的选项（仅默认目录 - 单个租户）'和将其与您的网站集成在前端API中，以便用户在验证每个用户的电子邮件地址后，以重置密码。对于上述配置，请参考以下文档链接以获取更多详细信息，因为它描述了用于注册单个租户/组织的用户的配置： -
<>
com/en-us/azure/active-directory-b2c/Identity-provider-azure-ad-ad-single-tenant？pivots = b2c 下面的文档链接
使用用户流程部分作为设置用户流进行重置初始临时密码是一个非常简单的过程，如下所述： -<> https://learn.microsoft .com/en-us/azure/active-directory-b2c/add-password-reset-policy?pivots=b2c-user-flow
• In your scenario, I would suggest you configure an application registration in Azure AD B2C and configure user flows in it for resetting the password for every user logging in it. Also, while
registering an application in Azure AD B2C, you can select the option for ‘Accounts in this organizational directory only (Default Directory only - Single tenant)’ and integrate it with your website in the frontend API such that the user flow to reset the password after verifying the email address comes up for every user.For the above said configuration, kindly refer to the below documentation link for more details as it describes the configuration for registering users of a single tenant/organization: -
https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-azure-ad-single-tenant?pivots=b2c-user-flow
Also, refer to the below documentation link for
resetting the initial temporary password using the user flow section as setting up a user flow is a very simple processas described below: -https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-password-reset-policy?pivots=b2c-user-flow