Edit

Create a customer identity and access management (CIAM) tenant (preview)

  • Article

Microsoft Entra ID offers a customer identity access management (CIAM) solution that lets you create secure, customized sign-in experiences for your customer-facing apps and services. With these built-in CIAM features, Microsoft Entra ID can serve as the identity provider and access management service for your customer scenarios. You'll need to create an external tenant in the Microsoft Entra admin center to get started. Once the external tenant is created, you can access it in both the Microsoft Entra admin center and the Azure portal.

In this article, you learn how to:

  • Create an external tenant
  • Switch to the directory containing your external tenant
  • Find your external tenant name and ID in the Microsoft Entra admin center

Prerequisites

  • An Azure subscription. If you don't have one, create a free account before you begin.
  • An Azure account that's been assigned at least the Tenant Creator role scoped to the subscription or to a resource group within the subscription.

Important

Microsoft Entra External ID for external-facing apps is currently in preview. See the Universal License Terms for Online Services for legal terms that apply to Azure features and services that are in beta, preview, or otherwise not generally available.

Create a new external tenant

  1. Sign in to your organization's Microsoft Entra admin center as at least a Tenant Creator.

  2. Browse to Identity > Overview > Manage tenants.

  3. Select Create.

    Screenshot of the create tenant option.

  4. Select Customer, and then Continue.

    Screenshot of the select tenant type screen.

  5. If you're creating an external tenant for the first time, you have the option to create a trial tenant that doesn't require an Azure subscription. Otherwise, use the Azure Subscription option to continue to the next step.

  6. If you choose the 30-day free trial, an Azure subscription isn't required.

  7. If you choose Use Azure Subscription option, then the admin center displays the tenant creation page. On the Basics tab, in the Create a tenant for customers page, enter the following information:

    Screenshot of the Basics tab.

    • Type your desired Tenant Name (for example Contoso Customers).

    • Type your desired Domain Name (for example Contosocustomers).

    • Select your desired Location. This selection can't be changed later.

  8. Select Next: Add a subscription.

  9. On the Add a subscription tab, enter the following information:

    • Next to Subscription, select your subscription from the menu.

    • Next to Resource group, select a resource group from the menu. If there are no available resource groups, select Create new, type a Name, and then select OK.

    • If Resource group location appears, select the geographic location of the resource group from the menu.

    Screenshot that shows the subscription settings.

  10. Select Next: Review + Create. If the information that you entered is correct, select Create. The tenant creation process can take up to 30 minutes. You can monitor the progress of the tenant creation process in the Notifications pane. Once the external tenant is created, you can access it in both the Microsoft Entra admin center and the Azure portal.

    Screenshot that shows the link to the new external tenant.

Get the external tenant details

If you're not sure which directory contains your external tenant, you can find the tenant name and ID both in the Microsoft Entra admin center and in the Azure portal.

  1. If you have access to multiple tenants, select the Settings icon in the top menu to switch to the external tenant from the Directories + subscriptions menu.

    Screenshot of the Directories + subscriptions icon.

  2. On the Portal settings | Directories + subscriptions page, find your external tenant in the Directory name list, and then select Switch. This step will bring you to the tenant's home page.

  3. Select the Overview tab at the top of the page. You can find the tenant Name, Tenant ID and Primary domain under Basic information.

    Screenshot of the tenant details.

You can find the same details if you go to Microsoft Entra ID either in the Microsoft Entra admin center or in the Azure portal. On the Microsoft Entra ID page, you can find the tenant Name, Tenant ID and Primary domain under Overview > Basic information.

Next steps