Skip to content

Commit

Permalink
Merging changes synced from https://github.com/MicrosoftDocs/azure-do…
Browse files Browse the repository at this point in the history
…cs-pr (branch live)
  • Loading branch information
tynevi committed Mar 25, 2019
2 parents a97dfee + 70550d2 commit 0e82d75
Show file tree
Hide file tree
Showing 184 changed files with 1,790 additions and 781 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ Many modern apps have a single-page app front end that primarily is written in J

To support these applications, Azure Active Directory B2C (Azure AD B2C) uses the OAuth 2.0 implicit flow. The OAuth 2.0 authorization implicit grant flow is described in [section 4.2 of the OAuth 2.0 specification](https://tools.ietf.org/html/rfc6749). In implicit flow, the app receives tokens directly from the Azure Active Directory (Azure AD) authorize endpoint, without any server-to-server exchange. All authentication logic and session handling takes place entirely in the JavaScript client, without additional page redirects.

Azure AD B2C extends the standard OAuth 2.0 implicit flow to more than simple authentication and authorization. Azure AD B2C introduces the [policy parameter](active-directory-b2c-reference-policies.md). With the policy parameter, you can use OAuth 2.0 to add policies to your app, such as sign-up, sign-in, and profile management user flows. In this article, we show you how to use the implicit flow and Azure AD to implement each of these experiences in your single-page applications. To help you get started, take a look at our [Node.js](https://github.com/Azure-Samples/active-directory-b2c-javascript-singlepageapp-nodejs-webapi) and [Microsoft .NET](https://github.com/Azure-Samples/active-directory-b2c-javascript-singlepageapp-dotnet-webapi) samples.
Azure AD B2C extends the standard OAuth 2.0 implicit flow to more than simple authentication and authorization. Azure AD B2C introduces the [policy parameter](active-directory-b2c-reference-policies.md). With the policy parameter, you can use OAuth 2.0 to add policies to your app, such as sign-up, sign-in, and profile management user flows. In this article, we show you how to use the implicit flow and Azure AD to implement each of these experiences in your single-page applications.

In the example HTTP requests in this article, we use our sample Azure AD B2C directory, **fabrikamb2c.onmicrosoft.com**. We also use our own sample application and user flows. You can try the requests yourself by using these values, or you can replace them with your own values.
Learn how to [get your own Azure AD B2C directory, application, and user flows](#use-your-own-azure-ad-b2c-tenant).
Expand Down Expand Up @@ -272,8 +272,3 @@ To try these requests yourself, complete the following three steps. Replace the
2. [Create an application](active-directory-b2c-app-registration.md) to obtain an application ID and a `redirect_uri` value. Include a web app or web API in your app. Optionally, you can create an application secret.
3. [Create your user flows](active-directory-b2c-reference-policies.md) to obtain your user flow names.

## Samples

* [Create a single-page app by using Node.js](https://github.com/Azure-Samples/active-directory-b2c-javascript-singlepageapp-nodejs-webapi)
* [Create a single-page app by using .NET](https://github.com/Azure-Samples/active-directory-b2c-javascript-singlepageapp-dotnet-webapi)

Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ manager: daveba
ms.service: active-directory
ms.workload: identity
ms.topic: conceptual
ms.date: 09/11/2018
ms.date: 03/25/2019
ms.author: davidmu
ms.subservice: B2C
---
Expand All @@ -20,15 +20,13 @@ ms.subservice: B2C
To use a Google account as an [identity provider](active-directory-b2c-reference-oauth-code.md) in Azure Active Directory (Azure AD) B2C, you need to create an application in your tenant that represents it. If you don’t already have a Google account you can get it at [https://accounts.google.com/SignUp](https://accounts.google.com/SignUp).

1. Sign in to the [Google Developers Console](https://console.developers.google.com/) with your Google account credentials.
2. Select **Create project**, and then click **Create**. If you have created projects before, select the project list, and then select **New Project**.
2. In the upper-left corner of the page, select the project list, and then select **New Project**.
3. Enter a **Project Name**, click **Create**, and then make sure you are using the new project.
3. Select **Credentials** in the left menu, and then select **Create credentials** > **Oauth client ID**.
4. Select **Configure consent screen**.
5. Select or specify a valid **Email address**, provide a **Product name shown to users**, add `b2clogin.com` to **Authorized domains**, and click **Save**.
6. Under **Application type**, select **Web application**.
7. Enter a **Name** for your application, enter `https://your-tenant-name.b2clogin.com` in **Authorized JavaScript origins**, and `https://your-tenant-name.b2clogin.com/your-tenant-name.onmicrosoft.com/oauth2/authresp` in **Authorized redirect URIs**. Replace `your-tenant-name` with the name of your tenant. You need to use all lowercase letters when entering your tenant name even if the tenant is defined with uppercase letters in Azure AD B2C.
8. Click **Create**.
9. Copy the values of **Client ID** and **Client secret**. You will need both of them to configure Google as an identity provider in your tenant. **Client secret** is an important security credential.
4. Select **Credentials** in the left menu, and then select **Create credentials** > **Oauth client ID**.
5. Under **Application type**, select **Web application**.
6. Enter a **Name** for your application, enter `https://your-tenant-name.b2clogin.com` in **Authorized JavaScript origins**, and `https://your-tenant-name.b2clogin.com/your-tenant-name.onmicrosoft.com/oauth2/authresp` in **Authorized redirect URIs**. Replace `your-tenant-name` with the name of your tenant. You need to use all lowercase letters when entering your tenant name even if the tenant is defined with uppercase letters in Azure AD B2C.
7. Click **Create**.
8. Copy the values of **Client ID** and **Client secret**. You will need both of them to configure Google as an identity provider in your tenant. **Client secret** is an important security credential.

## Configure a Google account as an identity provider

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,8 @@ ms.collection: M365-identity-device-management

After the deployment of Azure AD Password Protection, monitoring and reporting are essential tasks. This article goes into detail to help you understand various monitoring techniques, including where each service logs information and how to report on the use of Azure AD Password Protection.

Monitoring and reporting are done either by event log messages or by running PowerShell cmdlets. The DC agent and proxy services both log event log messages. All PowerShell cmdlets described below are only available on the proxy server (see the AzureADPasswordProtection PowerShell module). The DC agent software does not install a PowerShell module.

## DC agent event logging

On each domain controller, the DC agent service software writes the results of each individual password validation operation (and other status) to a local event log:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ ms.devlang: na
ms.topic: article
ms.tgt_pltfrm: na
ms.workload: identity
ms.date: 03/22/2019
ms.date: 03/25/2019
ms.author: markvi
ms.reviewer: calebb

Expand Down Expand Up @@ -136,4 +136,6 @@ If you block legacy authentication using the other clients condition, you can al

## Next steps

If you are not familiar with configuring conditional access policies yet, see [require MFA for specific apps with Azure Active Directory conditional access](app-based-mfa.md) for an example.
- If you are not familiar with configuring conditional access policies yet, see [require MFA for specific apps with Azure Active Directory conditional access](app-based-mfa.md) for an example.

- For more information about modern authentication support, see [How modern authentication works for Office 2013 and Office 2016 client apps](https://docs.microsoft.com/en-us/office365/enterprise/modern-auth-for-office-2013-and-2016)
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Azure Active Directory activity logs in Azure Monitor (preview) | Microso
description: Introduction to Azure Active Directory activity logs in Azure Monitor (preview)
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Audit activity reports in the Azure Active Directory portal | Microsoft D
description: Introduction to the audit activity reports in the Azure Active Directory portal
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -16,7 +16,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Get started with the Azure AD reporting API | Microsoft Docs
description: How to get started with the Azure Active Directory reporting API
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -16,7 +16,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Azure Active Directory risk events | Microsoft Docs
description: This artice gives you a detailed overview of what risk events are.
services: active-directory
keywords: azure active directory identity protection, security, risk, risk level, vulnerability, security policy
author: priyamohanram
author: MarkusVi
manager: daveba

ms.assetid: fa2c8b51-d43d-4349-8308-97e87665400b
Expand All @@ -14,7 +14,7 @@ ms.devlang: na
ms.topic: conceptual
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
title: Risky sign-ins report in the Azure Active Directory portal | Microsoft Docs
description: Learn about the risky sign-ins report in the Azure Active Directory portal
services: active-directory
author: priyamohanram
author: MarkusVi
manager: daveba

ms.assetid: 7728fcd7-3dd5-4b99-a0e4-949c69788c0f
Expand All @@ -14,7 +14,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Sign-in activity reports in the Azure Active Directory portal | Microsoft
description: Introduction to sign-in activity reports in the Azure Active Directory portal
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
title: Users flagged for risk security report in the Azure Active Directory portal | Microsoft Docs
description: Learn about the users flagged for risk security report in the Azure Active Directory portal
services: active-directory
author: priyamohanram
author: MarkusVi
manager: daveba

ms.assetid: addd60fe-d5ac-4b8b-983c-0736c80ace02
Expand All @@ -14,7 +14,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 01/17/2019
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Analyze Azure Active Directory activity logs using Azure Monitor logs (pr
description: Learn how to analyze Azure Active Directory activity logs using Azure Monitor logs (preview)
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Prerequisites to access the Azure Active Directory reporting API | Micros
description: Learn about the prerequisites to access the Azure AD reporting API
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Find Azure Active Directory user activity reports in Azure portal | Micro
description: Learn where the Azure Active Directory user activity reports are in the Azure portal.
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -13,7 +13,7 @@ ms.topic: conceptual
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: How to install and use the log analytics views for Azure Active Directory
description: Learn how to install and use the log analytics views for Azure Active Directory (preview)
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: How to integrate Azure Active Directory logs with ArcSight using Azure Mo
description: Learn how to integrate Azure Active Directory logs with ArcSight using Azure Monitor (preview)
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 12/03/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Stream Azure Active Directory logs to Azure Monitor logs (preview) | Mic
description: Learn how to integrate Azure Active Directory logs with Azure Monitor logs (preview)
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Stream Azure Active Directory logs to SumoLogic using Azure Monitor (prev
description: Learn how to integrate Azure Active Directory logs with SumoLogic using Azure Monitor (preview)
services: active-directory
documentationcenter: ''
author: priyamohanram
author: MarkusVi
manager: daveba
editor: ''

Expand All @@ -15,7 +15,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
title: How to use the Azure Active Directory Power BI Content Pack | Microsoft Docs
description: Learn how to use the Azure Active Directory Power BI Content Pack
services: active-directory
author: priyamohanram
author: MarkusVi
manager: daveba

ms.assetid: addd60fe-d5ac-4b8b-983c-0736c80ace02
Expand All @@ -14,7 +14,7 @@ ms.tgt_pltfrm:
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
title: Users flagged for risk security report in the Azure Active Directory portal | Microsoft Docs
description: Learn about the users flagged for risk security report in the Azure Active Directory portal
services: active-directory
author: priyamohanram
author: MarkusVi
manager: daveba

ms.assetid: addd60fe-d5ac-4b8b-983c-0736c80ace02
Expand All @@ -14,7 +14,7 @@ ms.tgt_pltfrm: na
ms.workload: identity
ms.subservice: report-monitor
ms.date: 11/13/2018
ms.author: priyamo
ms.author: markvi
ms.reviewer: dhanyahk

ms.collection: M365-identity-device-management
Expand Down
Loading

0 comments on commit 0e82d75

Please sign in to comment.