Quickstart: Get started with Microsoft Entra External ID in external tenants (preview)

Get started with Microsoft External ID for consumer and business customer apps (Preview), which lets you create secure, customized sign-in experiences for your apps and services. With these built-in external configuration features, Microsoft Entra External ID can serve as the identity provider and access management service for your customers.

In this quickstart, you'll learn how to set up an external tenant free trial. If you're a developer using Visual Studio Code, you can also set up a free trial through the Microsoft Entra External ID extension (learn more). If you already have an Azure subscription, you can create a tenant with external configurations in the Microsoft Entra admin center. For more information about how to create a tenant, see Set up a tenant.

Your free trial of a tenant with external configurations provides you with the opportunity to try new features and build applications and processes during the free trial period. Organization (tenant) admins can invite other users. Each user account can only have one active free trial tenant at a time. The free trial isn't designed for scale testing. Trial tenant will support up to 10K resources, learn more about Microsoft Entra service limits here. During your free trial, you'll have the option to unlock the full set of features by upgrading to Azure free account.

Note

At the end of the free trial period, your free trial tenant will be disabled and deleted. You can always come back and register for another trial using this link: https://aka.ms/ciam-free-trial.

During the free trial period, you'll have access to all product features with few exceptions. See the following table for comparison:

Features Microsoft Entra External ID Trial (without credit card) Microsoft Entra account includes Partners (needs credit card)
Self-service account experiences (Sign-up, sign-in, and password recovery.) ✔️ ✔️
MFA (With email OTP.) ✔️
Custom token augmentation (From external sources.) ✔️ ✔️
Social identity providers ✔️ ✔️
Identity Protection (Conditional Access for adaptive risk-based policies.) ✔️
Default, least-access privileges for CIAM end-users. ✔️ ✔️
Rich authorization (Including group and role management.) ✔️ ✔️
Customizable (Sign-in/sign-up experiences - background, logo, strings.) ✔️ ✔️
Group and User management. ✔️ ✔️
Cloud-agnostic solution with multi-language auth SDK support. ✔️ ✔️

Important

Microsoft Entra External ID in external tenants is currently in preview. See the Universal License Terms for Online Services for legal terms that apply to Azure features and services that are in beta, preview, or otherwise not generally available.

Sign up to your external tenant free trial

  1. Open your browser and visit https://aka.ms/ciam-free-trial.

  2. You can sign in to the external trial tenant using your personal account, and your Microsoft account (MSA) or GitHub account.

  3. You'll notice that a domain name and location have been set for you. The domain name and the data location can't be changed later in the free trial. Select Change settings if you would like to adjust them.

  4. Select Continue and hang on while we set up your trial. It will take a few minutes for the trial to become ready for the next step.

    Screenshot of the loading page while setting up the external tenant free trial.

Get started guide

Once your external tenant free trial is ready, the next step is to personalize your customer's sign-in and sign-up experience, set up a user in your tenant, and configure a sample app. The get started guide will walk you through all of these steps in just a few minutes. For more information about the next steps, see the get started guide article.

Upgrade your free trial by adding an Azure subscription

You can upgrade your 30 days free trial of a tenant with external configurations to unlock the full set of features.

Note

During the preview period, linking a subscription to your trial tenant will not result in any charges. However, prices will apply once this product is generally available (GA).

Upgrade your free trial with a new Azure subscription

If you don't have any Azure subscriptions, follow the steps below.

  1. Sign in to the Microsoft Entra admin center.

  2. Browse to Home > Tenant overview.

  3. Select Upgrade.

    Screenshot of the upgrade trial button.

  4. On the https://signup.azure.com/ page fill in the required information to complete your Azure account setup and select Sign up and Submit. You'll be redirected to the Azure portal.

  5. To link your new Azure subscription to your tenant, select Add subscription.

    Screenshot of adding a subscription to the tenant

  6. Enter the following values:

    • Subscription: Select your Azure subscription.
    • Resource group: Create a new resource group. It can take a few seconds.
    • Resource group location: Select an Azure location.

    Screenshot of creating a resource group.

  7. Select Add.

  8. After a few seconds, you'll see a notification that you successfully linked your subscription to the tenant. From here you can switch to your upgraded tenant.

    Screenshot of the switch to tenant link.

Upgrade your free trial with an existing tenant subscription

If your free trial belongs to an account with an existing Azure subscription, you can upgrade your free trial with the existing subscription. To associate your free trial with an existing tenant to unlock the full set of features follow the steps below.

  1. Sign in to the Microsoft Entra admin center.

  2. Browse to Home > Tenant overview.

  3. Select Add Subscription.

  4. Select a tenant from the menu and select Switch.

    Screenshot of the existing subscription screen.

  5. Select the subscription and resource group you want to associate with your tenant and select Add. Upgrading the trial tenant can take a few seconds.

  6. After a few seconds, you'll see a notification that you successfully linked your subscription to the tenant. From here you can switch to your upgraded tenant.

    Screenshot of the switch to tenant link.