I've been searching everywhere, but can't seem to find anything on specifically registering users through Azure.

Primary question: how does one configure Azure to allow users to register themselves to an Azure Active Directory through SSO?

Secondary: how to do so with SSO on WordPress

Explanation: I use Azure AD to manage app registration, I want users to have a login without buying (purchase workflow invites them to the AD and assigns them a group)

CodePudding user response：

User cannot register themselves in Azure AD by their own. Only Admin Have a privileged to add and remove user from Azure Active Directory. Admin and user who has privileged to invites them to the AD and assigns them a group.

WordPress Login with Azure (Azure SSO) plugin allows you Login(Single Sign-On) to your WordPress site using your Azure(Azure AD / Azure B2C / Office 365 ) account credentials. This plugin uses OAuth/OpenID Connect protocol to achieve Single Sign-on.This plugin also provides SSO with custom applications as well.

This Azure SSO plugin allows all Azure users (Active Directory Users, B2C Users,and external users) to login into WordPress with their existing Microsoft Azure account and also create a user account into WordPress. Some of the Azure Single Sign-On use-cases are listed below.

• Single Sign-On to WordPress using Azure AD users (Azure AD SSO)

• Single Sign-On to WordPress using Azure B2C users (Azure B2C SSO)

• Single Sign-On to WordPress using external users synced to Azure AD (Azure AD SSO)

• Single Sign-On to WordPress using Office 365 users (Office 365 SSO)

Please refer this document1 and Document2 to implement Registering external users through Azure SSO (in Wordpress)

CodePudding user response：

Azure AD manages authentication and authorisation.

It does not manage provisioning.

This is done manually via the portal, programmatically via Graph API, via AAD Connect from on-premises or by using SCIM.

For external users, Azure AD provides external identities where the user can self-register,