{"id":1611,"date":"2013-03-04T08:14:38","date_gmt":"2013-03-04T17:14:38","guid":{"rendered":"http:\/\/www.cloudidentity.com\/blog\/?p=1611"},"modified":"2013-03-04T22:24:01","modified_gmt":"2013-03-05T07:24:01","slug":"managing-windows-azure-ad-from-the-windows-azure-portal-1-sign-up-with-an-organizational-account","status":"publish","type":"post","link":"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-1-sign-up-with-an-organizational-account\/","title":{"rendered":"Managing Windows Azure AD from the Windows Azure Portal 1&ndash; Sign Up with an Organizational Account"},"content":{"rendered":"<p>Here there\u2019s the first of three super quick visual guides about playing with the new Windows Azure Active Directory features in the Windows Azure portal. Please make sure you read <a href=\"http:\/\/blogs.msdn.com\/b\/windowsazure\/archive\/2013\/03\/04\/more-identity-and-access-management-improvements-in-windows-azure.aspx\">Alex\u2019s announcement <\/a>and watch Abhishek\u2019s video first!<\/p>\n<p>I\u2019ll try to keep the word count down, and let the screenshots speak! Hopefully this will entice you to try things yourself, and provide some reassurance if you are going through the process and get stuck. Note, I didn\u2019t work at all on this great feature! All the credit goes to the UX and directory teams, who did a super job here. I just went through the following steps as any other customer would, and took screenshots along the way.<\/p>\n<p>I broke down things in three posts:<\/p>\n<ol>\n<li><strong><span style=\"text-decoration: underline;\">This post<\/span><\/strong> shows you how to sign up for a new Windows Azure subscription using an organizational account from an existing Windows Azure Active Directory tenant (e.g. your existing directory from an Office 365 subscription, etc). This option is actually not new, it was already available to you few weeks ago. I captured it anyway to give you a full end-to-end walkthrough with coherent names &amp; screens.<\/li>\n<li><a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-2-explore-the-directory-features\/\">The second post<\/a> will go through the main directory management features offered by the portal<\/li>\n<li><a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-3-add-a-co-admin-use-2fa\/\">The third post<\/a> will demonstrate something really really cool: we\u2019ll create a new directory user, make it a global admin in the directory, and a co-admin in the Windows Azure subscription. Then\u2026 we\u2019ll configure that account to enforce phone-based additional authentication factor when accessing the portal <img decoding=\"async\" class=\"wlEmoticon wlEmoticon-smile\" alt=\"Smile\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/wlEmoticon-smile4.png\" \/> pretty awesome, eh? Spoiler alert: there will be pictures of my phone.<\/li>\n<\/ol>\n<p>Ready? Let\u2019s dive right in.<\/p>\n<p>Navigate to <a href=\"http:\/\/www.windowsazure.com\">www.windowsazure.com<\/a>.<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image23.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb24.png\" width=\"604\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>Click on the free trial link.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image24.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb25.png\" width=\"603\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>Wow, it looks like you can get a lot of stuff with this free trial! Hit \u201cTry it Free\u201d.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image25.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb26.png\" width=\"603\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>Take a moment to study this screen. On the right hand side you can find the usual controls for signing in via existing Microsoft Account.<br \/>\nIf you take a look at the left hand side, you\u2019ll notice that the splash image offers another couple of options. We said that we want to sign up using our organizational account, and there we can find exactly the right option: \u201cOffice 365 users: sign in with your organizational account\u201d. Click it.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image26.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb27.png\" width=\"603\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>If you played with our dev preview, for example with the <a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/02\/18\/microsoft-asp-net-tools-for-windows-azure-active-directory-visual-studio-2012-4\/\">ASP.NET tool for Windows Azure AD<\/a>, you are already familiar with this screen: it\u2019s the sign in page for Windows Azure AD. I have a directory tenant we\u2019ve been using for playing with the <a href=\"https:\/\/www.cloudidentity.com\/blog\/2012\/11\/20\/a-refresh-of-the-windows-azure-authentication-library-developer-preview-2\/\">AAL samples<\/a>, I\u2019ll use the admin user from that. You can use the admin any of from your existing tenants (if you don\u2019t have any, consider taking a look <a href=\"http:\/\/activedirectory.windowsazure.com\/develop\">here<\/a>).<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image27.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb28.png\" width=\"604\" height=\"565\" border=\"0\" \/><\/a><\/p>\n<p>That tenant is not associated to any Windows Azure subscription\u2026 yet: that\u2019s why we are going though this tutorial <img decoding=\"async\" class=\"wlEmoticon wlEmoticon-smile\" alt=\"Smile\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/wlEmoticon-smile4.png\" \/> for starting the trial provisioning process, click on sign up.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image28.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb29.png\" width=\"603\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>This screen informs you of what you\u2019ll get, and what you\u2019ll need to set things up: namely, a mobile phone and a credit card. Don\u2019t worry, the trial does not charge! It\u2019s for identification purposes only. Click the arrow on the lower right.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image29.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb30.png\" width=\"604\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>First verification step: you provide a mobile phone number, and Windows Azure sends you a code via SMS. Enter your mobile # and keep an eye on your phone.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image30.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb31.png\" width=\"604\" height=\"419\" border=\"0\" \/><\/a><\/p>\n<p>Within few seconds, your phone will buzz with a message. Copy the code you received in the page, which will magically produce a field for it.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image31.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb32.png\" width=\"601\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>Once the code is verified, you can move on to the next step via the arrow on the lower right.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image32.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb33.png\" width=\"604\" height=\"565\" border=\"0\" \/><\/a><\/p>\n<p>Last step! Here you can enter your credit card details, which will be used to identify you. Did I mention it\u2019s for identification purposes only? Fill things in, then hit next.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image33.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb34.png\" width=\"604\" height=\"565\" border=\"0\" \/><\/a><\/p>\n<p>Et voila\u2019! You now have a trial subscription associated you your directory user (as opposed to a \u201ctraditional\u201d subscription, where you would have used a Microsoft Account). In fact, you are already signed in (if you observed the top right corner you\u2019ll see you already were earlier; you simply didn\u2019t have a subscription). Hit the portal link and\u2026<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image34.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb35.png\" width=\"602\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>You\u2019re in! Take the tour or skip it, you your heart\u2019s content; anyway, once you\u2019re done with that dialog, take a look at the vertical list of tabs on the right. You\u2019ll see there is an entry for active directory: click it.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image35.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb36.png\" width=\"603\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>Here we start to see something that wasn\u2019t there before: along with the access control namespace header, there is now a new <strong>enterprise directory<\/strong> header. Under that, you\u2019ll find the directory tenant to which the current user belong. If you click on it, all sorts of interesting things will show up\u2026 as explained in the<a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-2-explore-the-directory-features\/\"> next post<\/a>!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here there\u2019s the first of three super quick visual guides about playing with the new Windows Azure Active Directory features in the Windows Azure portal. Please make sure you read Alex\u2019s announcement and watch Abhishek\u2019s video first! I\u2019ll try to keep the word count down, and let the screenshots speak! Hopefully this will&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1590,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/1611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/comments?post=1611"}],"version-history":[{"count":3,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/1611\/revisions"}],"predecessor-version":[{"id":1633,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/1611\/revisions\/1633"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/media\/1590"}],"wp:attachment":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/media?parent=1611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/categories?post=1611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/tags?post=1611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}