This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 37%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESF%3C/text%3E%3C/svg%3E)
Can I have users self register as a member instead of a guest to the Azure Portal via an external identity user flow?
We manage our companies identities in Google ATM, and I want users to be able to sign in to the Azure Portal with their Google credentials and automatically have an external user created for them, with proper permissions if possible to sync permissions from groups from Google. But if I even managed to setup such a flow, I think it creates them as guest users. Is there a possibly to self sign up with such a flow and be marked as a member for emails from my company's domain?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 51%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Hi @Segev Finer (Swimm)
I understand that you are trying to have users self-register as a member instead of a guest to the Azure Portal via an external identity user flow.
Microsoft Entra B2B user and guest user are synonymous. Therefore, a Microsoft Entra B2B collaboration user is added as a user with User Type set to Guest by default. However, in some cases, the partner organization is a member of a larger organization to which the host organization also belongs. If so, the host organization might want to treat users in the partner organization as members instead of guests. You can use the Microsoft Entra B2B Invitation Manager APIs to add or invite a user from the partner organization to the host organization as a member.
For reference: https://learn.microsoft.com/en-us/entra/external-id/user-properties#can-microsoft-entra-b2b-users-be-added-as-members-instead-of-guests
If you're an admin, you can choose to invite the user as member.
"invitedUserType": "Member"
Follow the document for more information: https://learn.microsoft.com/en-us/entra/external-id/customize-invitation-api
Hope this helps. Do let us know if you have any further queries.
If this answers your query, do click `Accept Answer` and `Yes`.
Hi @Segev Finer (Swimm)
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Hi @Segev Finer (Swimm)
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
So the answer is that self-service sign in flow is not supported in the Azure Portal ATM, only in external applications that use Entra ID for login, and in that flow they are always created as guest users.
So I will currently need to manually invite users, or find out how to set up user provisioning from Google Workspaces to Entra ID to have users automatically created/removed.
Hi @Segev Finer (Swimm)
To set up user provisioning from Google Workspaces to Entra ID. Follow the document:
https://learn.microsoft.com/en-us/entra/identity/saas-apps/g-suite-provisioning-tutorial
Hope this helps. Do let us know if you have any further queries.
Doesn't that go Entra ID -> Google Workspaces?
I'm looking for the other direction.
Hi @Segev Finer (Swimm)
To set up user provisioning from Entra ID to Google Workspace. Follow the document: https://learn.microsoft.com/en-us/entra/identity/saas-apps/g-suite-provisioning-tutorial
Hope this helps. Do let us know if you have any further queries.