MODIFIED docs/external-id/customers/how-to-use-app-roles-customers.md

Modified by Yoel Horvitz on Sep 16, 2025 6:25 AM
📖 View on learn.microsoft.com

+1 / -13 lines changed

Commit: Update how-to-use-app-roles-customers.md

Changes:

Before

After

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 04/14/2025
ms.custom: it-pro, sfi-ga-nochange
---
 
 
When Microsoft Entra External ID issues a security token for an authenticated user, it includes the names of the roles you've assigned the user or group in the security token's roles claim. An application that receives that security token in a request can then make authorization decisions based on the values in the roles claim.
 
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=RBAC)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Role-based access control” use case.
 
## Groups
 
Developers can also use security groups to implement RBAC in their applications, where the memberships of the user in specific groups are interpreted as their role memberships. When an organization uses security groups, a groups claim is included in the token. The groups claim specifies the identifiers of all of the groups to which the user is assigned within the current external tenant.
 

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.custom: it-pro, sfi-ga-nochange
---
 
When Microsoft Entra External ID issues a security token for an authenticated user, it includes the names of the roles you've assigned the user or group in the security token's roles claim. An application that receives that security token in a request can then make authorization decisions based on the values in the roles claim.
 
## Groups
 
Developers can also use security groups to implement RBAC in their applications, where the memberships of the user in specific groups are interpreted as their role memberships. When an organization uses security groups, a groups claim is included in the token. The groups claim specifies the identifiers of all of the groups to which the user is assigned within the current external tenant.
 
## App roles vs. groups
 
Though you can use app roles or groups for authorization, key differences between them can influence which you decide to use for your scenario.

MODIFIED docs/identity-platform/custom-extension-attribute-collection.md

Modified by Yoel Horvitz on Sep 16, 2025 6:41 AM
📖 View on learn.microsoft.com

+1 / -12 lines changed

Commit: Update custom-extension-attribute-collection.md

Changes:

Before

After

author: msmimart
manager: CelesteDG
ms.author: mimart
ms.date: 04/28/2025
ms.service: identity-platform
ms.topic: how-to
titleSuffix: Microsoft identity platform
This article describes how to extend the user sign-up experience in Microsoft Entra External ID for customers. In customer sign-up user flows, event listeners can be used to extend the attribute collection process before attribute collection and at the time of attribute submission:
 
- The **OnAttributeCollectionStart** event occurs at the beginning of the attribute collection step, before the attribute collection page renders. You can add actions such as prefilling values and displaying a blocking error.
 
    > [!TIP]
    > [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=PreAttributeCollection)
    > 
    > To try out this feature, go to the Woodgrove Groceries demo and start the “[Prepopulate sign-up attributes](https://woodgrovedemo.com/#usecase=PreAttributeCollection)” use case.
    
- The **OnAttributeCollectionSubmit** event occurs after the user enters and submits attributes. You can add actions such as validating or modifying the user's entries.
 
    > [!TIP]
    > [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=PostAttributeCollection)

author: msmimart
manager: CelesteDG
ms.author: mimart
ms.date: 09/16/2025
ms.service: identity-platform
ms.topic: how-to
titleSuffix: Microsoft identity platform
This article describes how to extend the user sign-up experience in Microsoft Entra External ID for customers. In customer sign-up user flows, event listeners can be used to extend the attribute collection process before attribute collection and at the time of attribute submission:
 
- The **OnAttributeCollectionStart** event occurs at the beginning of the attribute collection step, before the attribute collection page renders. You can add actions such as prefilling values and displaying a blocking error.
- The **OnAttributeCollectionSubmit** event occurs after the user enters and submits attributes. You can add actions such as validating or modifying the user's entries.
    
In addition to creating a custom authentication extension for the attribute collection start and submit events, you need to create a REST API that defines the workflow actions to take for each event. You can use any programming language, framework, and hosting environment to create and host your REST API. This article demonstrates a quick way to get started using a C# Azure Function. With Azure Functions, you run your code in a serverless environment without having to first create a virtual machine (VM) or publish a web application.

MODIFIED docs/external-id/customers/overview-solutions-customers.md

Modified by Yoel Horvitz on Sep 16, 2025 6:23 AM
📖 View on learn.microsoft.com

+0 / -13 lines changed

Commit: Update overview-solutions-customers.md

Changes:

Before

After

 
When you enter an email address to create an account, your email is verified through a one-time passcode. Then you can create a new password and provide more details, such as your name, country or region, and other information. Once your account is created, your email becomes your sign-in ID.
 
To try out this feature, go to the Woodgrove Groceries demo and start the “[Online retail](https://woodgrovedemo.com/#usecase=OnlineRetail)” use case.
 
### Self-service password reset
 
Self-service password reset (SSPR) gives users the ability to change or reset their password, with no administrator or help desk involvement. If a user's account is locked or they forget their password, they can follow prompts to unblock themselves and get back to work.
 
To set up self-service password reset for your customers see the [Enable self-service password reset](how-to-enable-password-reset-customers.md) article.
 
To try out this feature, go to the Woodgrove Groceries demo and start the “[Self-service password reset](https://woodgrovedemo.com/#usecase=SSPR)” use case.
 
### Sign-in with a social account
 
You can offer your customers the ability to sign in with their existing social or enterprise accounts, without having to create a new account. On the sign-in page, select one of the identity providers, such as Google, Facebook or Apple. Then you're redirected to the selected provider's to complete the sign-in process.
 
To allow your customers to sign up and sign in using their social accounts, you can navigate to **External Identities** > **All identity providers** in the admin center. You can find the exact steps for adding Facebook, Google and Apple as identity providers in the following links for [Google](how-to-google-federation-customers.md), [Facebook](how-to-facebook-federation-customers.md) and for [Apple](how-to-apple-federation-customers.md). 
 
To try out this feature, go to the Woodgrove Groceries demo and start the “[Sign-in with social accounts](https://woodgrovedemo.com/#usecase=Social)” use case.

 
When you enter an email address to create an account, your email is verified through a one-time passcode. Then you can create a new password and provide more details, such as your name, country or region, and other information. Once your account is created, your email becomes your sign-in ID.
 
### Self-service password reset
 
Self-service password reset (SSPR) gives users the ability to change or reset their password, with no administrator or help desk involvement. If a user's account is locked or they forget their password, they can follow prompts to unblock themselves and get back to work.
 
To set up self-service password reset for your customers see the [Enable self-service password reset](how-to-enable-password-reset-customers.md) article.
 
### Sign-in with a social account
 
You can offer your customers the ability to sign in with their existing social or enterprise accounts, without having to create a new account. On the sign-in page, select one of the identity providers, such as Google, Facebook or Apple. Then you're redirected to the selected provider's to complete the sign-in process.
 
To allow your customers to sign up and sign in using their social accounts, you can navigate to **External Identities** > **All identity providers** in the admin center. You can find the exact steps for adding Facebook, Google and Apple as identity providers in the following links for [Google](how-to-google-federation-customers.md), [Facebook](how-to-facebook-federation-customers.md) and for [Apple](how-to-apple-federation-customers.md). 
 
<!--Ask PM about custom OIDC.-->
 
### Sign-up with a one-time passcode
 
If you want to understand how custom extensions work, you can refer to the [Custom extension overview](~/identity-platform/custom-extension-overview.md) article. For information on custom claims providers, you can check out the [Custom claims provider](~/identity-platform/custom-claims-provider-overview.md) article.

MODIFIED docs/external-id/customers/how-to-customize-languages-customers.md

Modified by Yoel Horvitz on Sep 16, 2025 6:33 AM
📖 View on learn.microsoft.com

+2 / -7 lines changed

Commit: Update date and remove tip from customization guide

Changes:

Before

After

 
ms.subservice: external
ms.topic: how-to
ms.date: 05/14/2025
ms.custom: it-pro
 
#Customer intent: As a dev, devops, or it admin, I want to learn about how to add customized browser languages to my app's authentication experience.
- [Create a user flow](how-to-user-flow-sign-up-sign-in-customers.md).
- Review the file size requirements for each image you want to add. You might need to use a photo editor to create the right-sized images. The preferred image type for all images is PNG, but JPG is accepted.
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=Language)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Language customization” use case.
 
## Add browser language under Company branding
 
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Organizational Branding Administrator](~/identity/role-based-access-control/permissions-reference.md#organizational-branding-administrator).
 
## Next steps

 
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.custom: it-pro
 
#Customer intent: As a dev, devops, or it admin, I want to learn about how to add customized browser languages to my app's authentication experience.
- [Create a user flow](how-to-user-flow-sign-up-sign-in-customers.md).
- Review the file size requirements for each image you want to add. You might need to use a photo editor to create the right-sized images. The preferred image type for all images is PNG, but JPG is accepted.
 
## Add browser language under Company branding
 
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Organizational Branding Administrator](~/identity/role-based-access-control/permissions-reference.md#organizational-branding-administrator).
 
## Next steps
 
- [Customize the branding and end-user experience](how-to-customize-branding-customers.md)

MODIFIED docs/external-id/customers/how-to-user-flow-sign-up-sign-in-customers.md

Modified by Yoel Horvitz on Sep 16, 2025 6:31 AM
📖 View on learn.microsoft.com

+2 / -7 lines changed

Commit: Change article date to 09/16/2025

Changes:

Before

After

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 04/23/2025
ms.reviewer: kengaderdus
ms.custom: it-pro, seo-july-2024, sfi-image-nochange
#Customer intent: As a dev, devops, or it admin, I want to create and customize a user flow, which determines the sign-up and sign-in experience for my customer users.
 
This article describes how to create a sign-in and sign-up user flow. After you create the user flow, the next step is to [add your application to the user flow](how-to-user-flow-add-application.md). You can create multiple user flows if you have multiple applications that you want to offer to customers. Or, you can use the same user flow for many applications. However, an application can have only one user flow. 
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=OnlineRetail)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Online retail” use case.
 
## Prerequisites
 
- **A Microsoft Entra external tenant**: Before you begin, create your Microsoft Entra external tenant. You can set up a <a href="https://aka.ms/ciam-free-trial?wt.mc_id=ciamcustomertenantfreetrial_linkclick_content_cnl" target="_blank">free trial</a>, or you can create a new external tenant in Microsoft Entra ID.
## Next steps
 

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.reviewer: kengaderdus
ms.custom: it-pro, seo-july-2024, sfi-image-nochange
#Customer intent: As a dev, devops, or it admin, I want to create and customize a user flow, which determines the sign-up and sign-in experience for my customer users.
 
This article describes how to create a sign-in and sign-up user flow. After you create the user flow, the next step is to [add your application to the user flow](how-to-user-flow-add-application.md). You can create multiple user flows if you have multiple applications that you want to offer to customers. Or, you can use the same user flow for many applications. However, an application can have only one user flow. 
 
## Prerequisites
 
- **A Microsoft Entra external tenant**: Before you begin, create your Microsoft Entra external tenant. You can set up a <a href="https://aka.ms/ciam-free-trial?wt.mc_id=ciamcustomertenantfreetrial_linkclick_content_cnl" target="_blank">free trial</a>, or you can create a new external tenant in Microsoft Entra ID.
## Next steps
 
- [Add your application to the user flow](how-to-user-flow-add-application.md)
- [Create custom user attributes and customize the order of the attributes on the sign-up page](how-to-define-custom-attributes.md).
 
 
 

MODIFIED docs/external-id/customers/how-to-define-custom-attributes.md

Modified by Yoel Horvitz on Sep 16, 2025 6:30 AM
📖 View on learn.microsoft.com

+2 / -7 lines changed

Commit: Update date and remove redundant tip in documentation

Changes:

Before

After

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 04/28/2025
ms.custom: it-pro, sfi-image-nochange
#Customer intent: As a developer, devops, IT admin, I want to create custom attributes in my tenant and add them to my sign-up user flow so that I can collect then during sign-up.
---
 
An attribute with a Boolean data type has a user input type of CheckboxSingleSelect. You can modify the text that displays next to the checkbox and include hyperlinks.
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=PolicyAgreement)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Add links to terms of use and privacy policies” use case.
 
To configure a single-select checkbox, follow these steps:
 
1. On the **Page layouts** page, find the attribute with data type of **Boolean** that you want to configure.
 
[Add attributes to the ID token returned to your application](how-to-add-attributes-to-token.md).

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.custom: it-pro, sfi-image-nochange
#Customer intent: As a developer, devops, IT admin, I want to create custom attributes in my tenant and add them to my sign-up user flow so that I can collect then during sign-up.
---
 
An attribute with a Boolean data type has a user input type of CheckboxSingleSelect. You can modify the text that displays next to the checkbox and include hyperlinks.
 
To configure a single-select checkbox, follow these steps:
 
1. On the **Page layouts** page, find the attribute with data type of **Boolean** that you want to configure.
 
[Add attributes to the ID token returned to your application](how-to-add-attributes-to-token.md).
 
[Create a sign-up and sign-in user flow for customers](how-to-user-flow-sign-up-sign-in-customers.md).
 
 
 

MODIFIED docs/external-id/customers/how-to-google-federation-customers.md

Modified by Yoel Horvitz on Sep 16, 2025 6:19 AM
📖 View on learn.microsoft.com

+2 / -7 lines changed

Commit: Update date and remove try-it-now tip in documentation

Changes:

Before

After

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 03/06/2025
ms.custom: it-pro, has-azure-ad-ps-ref, sfi-ga-nochange
#Customer intent: As a dev, devops, or it admin, I want to
---
 
By setting up federation with Google, you allow customers to sign in to your applications with their own Google accounts. After you add Google as one of your user flow's sign-in options, customers can sign up and sign in to your application with a Google account. (Learn more about [authentication methods and identity providers for customers](concept-authentication-methods-customers.md).)
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=Social)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Sign-in with a social account” use case.
 
## Prerequisites
 
- An [external tenant](how-to-create-external-tenant-portal.md).
 
- [Add Facebook as an identity provider](how-to-facebook-federation-customers.md)

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.custom: it-pro, has-azure-ad-ps-ref, sfi-ga-nochange
#Customer intent: As a dev, devops, or it admin, I want to
---
 
By setting up federation with Google, you allow customers to sign in to your applications with their own Google accounts. After you add Google as one of your user flow's sign-in options, customers can sign up and sign in to your application with a Google account. (Learn more about [authentication methods and identity providers for customers](concept-authentication-methods-customers.md).)
 
## Prerequisites
 
- An [external tenant](how-to-create-external-tenant-portal.md).
 
- [Add Facebook as an identity provider](how-to-facebook-federation-customers.md)
- [Add Apple as an identity provider](how-to-apple-federation-customers.md)
- [Add OpenID Connect as an external identity provider](how-to-custom-oidc-federation-customers.md)
 
 
 

MODIFIED docs/external-id/customers/how-to-add-attributes-to-token.md

Modified by Yoel Horvitz on Sep 16, 2025 6:34 AM
📖 View on learn.microsoft.com

+1 / -7 lines changed

Commit: Update how-to-add-attributes-to-token.md

Changes:

Before

After

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 04/14/2025
ms.custom: it-pro, sfi-image-nochange
---
 
 
You can specify which built-in or custom attributes you want to include as claims in the token that Microsoft Entra ID sends to your application.
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=TokenAugmentation)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Add claims to security tokens from a REST API” use case.
 
 
## Prerequisites
 
- [Register the application](/entra/identity-platform/quickstart-register-app) with Microsoft Entra ID.

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.custom: it-pro, sfi-image-nochange
---
 
You can specify which built-in or custom attributes you want to include as claims in the token that Microsoft Entra ID sends to your application.
 
## Prerequisites
 
- [Register the application](/entra/identity-platform/quickstart-register-app) with Microsoft Entra ID.

MODIFIED docs/external-id/customers/how-to-enable-password-reset-customers.md

Modified by Yoel Horvitz on Sep 16, 2025 6:28 AM
📖 View on learn.microsoft.com

+1 / -7 lines changed

Commit: Update password reset documentation date and content

Changes:

Before

After

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 12/05/2024
ms.author: cmulligan
ms.custom: it-pro, sfi-image-nochange
#Customer intent: As an it admin, I want to enable self-service password reset so my customers can reset their own passwords without admin assistance.
 
:::image type="content" source="media/how-to-enable-password-reset-customers/sspr-flow.png" alt-text="Screenshot that shows the self-service password rest flow.":::
 
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=SSPR)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Self-service password reset” use case.
 
## Prerequisites
 
- If you haven't already created your own external tenant, create one now.

ms.service: entra-external-id
ms.subservice: external
ms.topic: how-to
ms.date: 09/16/2025
ms.author: cmulligan
ms.custom: it-pro, sfi-image-nochange
#Customer intent: As an it admin, I want to enable self-service password reset so my customers can reset their own passwords without admin assistance.
 
:::image type="content" source="media/how-to-enable-password-reset-customers/sspr-flow.png" alt-text="Screenshot that shows the self-service password rest flow.":::
 
## Prerequisites
 
- If you haven't already created your own external tenant, create one now.

MODIFIED docs/external-id/customers/overview-customers-ciam.md

Modified by Yoel Horvitz on Sep 16, 2025 6:26 AM
📖 View on learn.microsoft.com

+2 / -6 lines changed

Commit: Change date in overview-customers-ciam.md

Changes:

Before

After

 
ms.subservice: external
ms.topic: overview
ms.date: 06/11/2025
ms.custom: it-pro, seo-july-2024
 
#Customer intent: As a dev, devops, or it admin, I want to learn about identity solutions for apps for consumers and business customers.
 
Conditional Access policies are enforced after the user has completed first-factor authentication. For example, if a user's sign-in risk level is high, they must perform MFA to gain access. Alternatively, the most restrictive approach is to block access to the application.
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=CA)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Conditional Access and multifactor authentication” use case.
### Multifactor authentication (MFA)
 
Microsoft Entra MFA helps safeguard access to data and applications while maintaining simplicity for your users. Microsoft Entra External ID integrates directly with Microsoft Entra MFA so you can add security to your sign-up and sign-in experiences by requiring a second form of authentication. You can fine-tune MFA depending on the extent of security you want to apply to your apps. Consider the following scenarios:
 
- See our [training, live demos, and videos](reference-training-videos.md).
- Learn more about [planning for Microsoft Entra External ID](concept-planning-your-solution.md).

 
ms.subservice: external
ms.topic: overview
ms.date: 09/16/2025
ms.custom: it-pro, seo-july-2024
 
#Customer intent: As a dev, devops, or it admin, I want to learn about identity solutions for apps for consumers and business customers.
 
Conditional Access policies are enforced after the user has completed first-factor authentication. For example, if a user's sign-in risk level is high, they must perform MFA to gain access. Alternatively, the most restrictive approach is to block access to the application.
 
### Multifactor authentication (MFA)
 
Microsoft Entra MFA helps safeguard access to data and applications while maintaining simplicity for your users. Microsoft Entra External ID integrates directly with Microsoft Entra MFA so you can add security to your sign-up and sign-in experiences by requiring a second form of authentication. You can fine-tune MFA depending on the extent of security you want to apply to your apps. Consider the following scenarios:
 
- See our [training, live demos, and videos](reference-training-videos.md).
- Learn more about [planning for Microsoft Entra External ID](concept-planning-your-solution.md).
- See also the [Microsoft Entra External ID Developer Center](https://aka.ms/ciam/dev) for the latest developer content and resources.

MODIFIED docs/external-id/customers/reference-training-videos.md

Modified by Yoel Horvitz on Sep 16, 2025 6:14 AM
📖 View on learn.microsoft.com

+1 / -7 lines changed

Commit: Update reference-training-videos.md

Changes:

Before

After

 
ms.subservice: external
ms.topic: concept-article
ms.date: 06/25/2025
ms.custom: it-pro
 
To start the training, go to [Guided project – Build a sample app to evaluate Microsoft Entra External ID](https://aka.ms/eeid/training-module) and follow the units in order.
 
## Woodgrove Groceries live demo
 
The Woodgrove Groceries live demo app is a fictional grocery store that incorporates Microsoft Entra External ID into its online shopping platform. It illustrates several common authentication experiences that can be configured for your apps. To explore the demo environment, visit [Woodgrove Groceries](https://woodgrovedemo.com/). On the right side of the screen, choose the **Select a use case** button, or use [this link](https://woodgrovedemo.com/#usecase=Default). Then, choose from a list of features and use cases related to authentication experiences.
 
:::image type="content" source="media/overview-solutions-customers/demo-woodgrove.png" alt-text="Screenshot of the Woodgrove Groceries demo home page.":::
 
## Visit our video library
 
Microsoft Entra External ID videos are incorporated within our documentation and can also be found under the [Microsoft Security Channel](https://www.youtube.com/microsoft-security) and [Microsoft Entra External ID playlist](https://www.youtube.com/playlist?list=PL3ZTgFEc7Lythpts59O9KOVuEDLWJLLmA) on YouTube. These videos range from conceptual explanations and practical "how-to" guides to extensive series designed as courses.

 
ms.subservice: external
ms.topic: concept-article
ms.date: 09/16/2025
ms.custom: it-pro
 
To start the training, go to [Guided project – Build a sample app to evaluate Microsoft Entra External ID](https://aka.ms/eeid/training-module) and follow the units in order.
 
## Visit our video library
 
Microsoft Entra External ID videos are incorporated within our documentation and can also be found under the [Microsoft Security Channel](https://www.youtube.com/microsoft-security) and [Microsoft Entra External ID playlist](https://www.youtube.com/playlist?list=PL3ZTgFEc7Lythpts59O9KOVuEDLWJLLmA) on YouTube. These videos range from conceptual explanations and practical "how-to" guides to extensive series designed as courses.

MODIFIED docs/identity-platform/custom-extension-onattributecollectionstart-retrieve-return-data.md

Modified by Yoel Horvitz on Sep 16, 2025 6:42 AM
📖 View on learn.microsoft.com

+1 / -6 lines changed

Commit: Update custom-extension-onattributecollectionstart-retrieve-return-data.md

Changes:

Before

After

author: msmimart
manager: CelesteDG
ms.author: mimart
ms.date: 06/26/2025
ms.service: identity-platform
 
ms.topic: how-to
- **showBlockPage** - Show an error message and block the user from signing up.
 
This article describes the REST API schema for the OnAttributeCollectionStart event. (See also the related article [Custom Extension for OnAttributeCollectionSubmit event](custom-extension-OnAttributeCollectionSubmit-reference.md).)
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=PreAttributeCollection)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “[Prepopulate sign-up attributes](https://woodgrovedemo.com/#usecase=PreAttributeCollection)” use case.
    
## REST API schema
 

author: msmimart
manager: CelesteDG
ms.author: mimart
ms.date: 09/16/2025
ms.service: identity-platform
 
ms.topic: how-to
- **showBlockPage** - Show an error message and block the user from signing up.
 
This article describes the REST API schema for the OnAttributeCollectionStart event. (See also the related article [Custom Extension for OnAttributeCollectionSubmit event](custom-extension-OnAttributeCollectionSubmit-reference.md).)
    
## REST API schema

MODIFIED docs/identity-platform/custom-extension-onattributecollectionsubmit-retrieve-return-data.md

Modified by Yoel Horvitz on Sep 16, 2025 6:43 AM
📖 View on learn.microsoft.com

+1 / -6 lines changed

Commit: Update custom-extension-onattributecollectionsubmit-retrieve-return-data.md

Changes:

Before

After

author: msmimart
manager: CelesteDG
ms.author: mimart 
ms.date: 06/26/2025
ms.service: identity-platform
 
ms.topic: how-to
- **showBlockPage** - Show an error message and block the user from signing up.
 
This article describes the REST API schema for the OnAttributeCollectionSubmit event. (See also the related article [Custom Extension for OnAttributeCollectionStart event](custom-extension-OnAttributeCollectionStart-reference.md).)
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=PostAttributeCollection)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “[Validate sign-up attributes](https://woodgrovedemo.com/#usecase=PostAttributeCollection)” use case, or the “[Block a user from continuing the sign-up process](https://woodgrovedemo.com/#usecase=BlockSignUp)” use case.
    
## REST API schema
 

author: msmimart
manager: CelesteDG
ms.author: mimart 
ms.date: 09/16/2025
ms.service: identity-platform
 
ms.topic: how-to
- **showBlockPage** - Show an error message and block the user from signing up.
 
This article describes the REST API schema for the OnAttributeCollectionSubmit event. (See also the related article [Custom Extension for OnAttributeCollectionStart event](custom-extension-OnAttributeCollectionStart-reference.md).)
    
## REST API schema

MODIFIED docs/identity/saas-apps/pagedna-tutorial.md

Modified by Sudhakaran S (HCL Technologies Corporate Services) on Sep 16, 2025 8:26 AM
📖 View on learn.microsoft.com

+7 / -0 lines changed

Commit: Adding Reply URL pattern

Changes:

Before

After

        |------|
        |`https://stores.pagedna.com/<your site>/saml2ep.cgi`|
        |`https://www.nationsprint.com/<your site>/saml2ep.cgi`|
 
    1. In the **Sign on URL** box, type a URL by using one of the following patterns:

        |------|
        |`https://stores.pagedna.com/<your site>/saml2ep.cgi`|
        |`https://www.nationsprint.com/<your site>/saml2ep.cgi`|
    
    1. In the **Reply URL (Assertion Consumer Service URL)** box, type a URL by using one of the following patterns:
 
        | **Reply URL** |
        |------|
        |`https://stores.pagedna.com/<your site>/saml2ep.cgi`|
        |`https://www.nationsprint.com/<your site>/saml2ep.cgi`|
 
    1. In the **Sign on URL** box, type a URL by using one of the following patterns:
 

MODIFIED docs/identity-platform/custom-claims-provider-overview.md

Modified by Yoel Horvitz on Sep 16, 2025 6:41 AM
📖 View on learn.microsoft.com

+1 / -6 lines changed

Commit: Update date and remove tip section in overview

Changes:

Before

After

manager: pmwongera
ms.author: cwerner
ms.custom: 
ms.date: 05/04/2025
ms.reviewer: jasuri
ms.service: identity-platform
 
 
To set up a custom claims provider, you'll need to [create a REST API with a token issuance start event](./custom-extension-tokenissuancestart-setup.md), then [configure a custom claim provider for a token issuance event](./custom-extension-tokenissuancestart-configuration.md).
 
> [!TIP]
> [![Try it now](./media/common/try-it-now.png)](https://woodgrovedemo.com/#usecase=TokenAugmentation)
> 
> To try out this feature, go to the Woodgrove Groceries demo and start the “Add claims to security tokens from a REST API” use case.
 
## Authentication events trigger for Azure Functions client library for .NET
 
<!--As an API developer, to be able to handle token issuance start custom extensions, I need to easily interact with the request object and easily build a response object without necessarily needing to know the exact format of the request or response

manager: pmwongera
ms.author: cwerner
ms.custom: 
ms.date: 09/16/2025
ms.reviewer: jasuri
ms.service: identity-platform
 
To set up a custom claims provider, you'll need to [create a REST API with a token issuance start event](./custom-extension-tokenissuancestart-setup.md), then [configure a custom claim provider for a token issuance event](./custom-extension-tokenissuancestart-configuration.md).
 
## Authentication events trigger for Azure Functions client library for .NET
 
<!--As an API developer, to be able to handle token issuance start custom extensions, I need to easily interact with the request object and easily build a response object without necessarily needing to know the exact format of the request or response

📋 Microsoft Entra Documentation Changes

📊 Summary

📝 Modified Documentation Files