Use Azure External Identity User Flow to onboard external users as guests and add them to Azure AD Security groups in one sign up process

Question

Hi there , we want to user External Identity User Flow for allowing collaborators outside or Azure tenant to be able to self sign up. We're planning to use the External Identity User Flow and would like users to to sign up and post sign up added to groups in Azure AD. Group membership is used for providing access to enterprise apps and app registered in our Azure tenant. How can I do this or is this possible with Azure External Identity User Flow ?

As I understand it we have to build a sign in page ourselves because External Identity does not provide one ?

Thanks

Answer 1

Hi @asneel singh

Thank you for posting this in Microsoft Q&A.I understand your ask whether if it is possible to use the External Identity User Flow to allow external users to self-sign up and be added to groups in Azure AD, and if so, how to achieve this.

Unfortunately, it is not possible to fulfill your requirement using the External Identity User Flow. User flow can be used to create sign-up and sign-in pages for your customers, but it does not have the ability to add users to groups.

For your reference: Add a sign-up-sign-in-customers in External tenants

You can find which groups and application roles are supported through Microsoft Graph and the admin center in the following document.

https://learn.microsoft.com/en-us/entra/external-id/customers/reference-group-app-roles-support

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.