Customise Tenant Portal Sign Up Page

Question

Hi, 
Is it possible to customise the sign up tenant portal page?
When a new customer signs up ideally we would like to capture a first name, last name, address and telephone number as a minimum. We are also interested in using the telephone number to use two factor authentication to ensure we only allow sign up from a valid
telephone number. Anyone have experience of this or are there any articles out there regarding implementation as I haven't found anything.
Thanks in advance.
Microsoft Partner

Answer 1

The sign up wont be available trough the Azure Pack portal anymore. You need to create a separate onboarding portal / process. When a user doesn't have a local ADFS the account will be stored in the AD you configured the ADFS in on your end.
for more information i can recommend http://www.hyper-v.nu
You can try this below in a test environment to see if it will works for you:
To install ADFS on a single box:
$serviceAccountCredential = Get-Credential -Message "Enter the credential for the Federation Service Account."
$cert = Import-PfxCertificate C:\Install\yourcertificate.pfx -Exportable -Password (ConvertTo-SecureString -String "P@ssw0rd" -AsPlainText -Force) -CertStoreLocation Cert:\LocalMachine\My
Install-WindowsFeature ADFS-Federation -IncludeManagementTools
Install-AdfsFarm `
-CertificateThumbprint:$cert.Thumbprint `
-FederationServiceDisplayName:"Tenant AD Login" `
-FederationServiceName:"sts.<your-domain.fqdn>" `
-ServiceAccountCredential:$serviceAccountCredential `
Then configure ADFS for your Azure Pack on the ADFS server:
$adminportal = "admin.<your-domain.fqdn>" #WAP Admin Portal
$tenantportal = "manage.<your-domain.fqdn>" #WAP Tenant Portal
$wapsqllogin = "logon.<your-domain.fqdn>" #WAP Logon portal
Set-ADFSWebConfig –HRDCookieEnabled $false
$AzurePackTenantRelyingParty = Add-AdfsRelyingPartyTrust -Name "Azure Pack Tenant Portal"-MetadataUrl https://$tenantportal/FederationMetadata/2007-06/FederationMetadata.xml -PassThru
$AzurePackAdminRelyingParty = Add-AdfsRelyingPartyTrust -Name "Azure Pack Admin Portal"-MetadataUrl https://$adminportal/FederationMetadata/2007-06/FederationMetadata.xml -PassThru
$IssuanceAuthorizationRules = '@RuleTemplate = "AllowAllAuthzRule"
=> issue(Type = "http://schemas.microsoft.com/authorization/claims/permit", Value = "true"); '
$IssuanceTransformRules = '@RuleTemplate = "LdapClaims"
@RuleName = "AD UPN"
c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"), query = ";userPrincipalName;{0}", param = c.Value);
@RuleTemplate = "PassThroughClaims"
@RuleName = "Pass through UPN"
c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"]
=> issue(claim = c);
@RuleTemplate = "LdapClaims"
@RuleName = "Group"
c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/claims/Group"), query = ";tokenGroups(domainQualifiedName);{0}", param = c.Value);
@RuleTemplate = "PassThroughClaims"
@RuleName = "Pass through Group"
c:[Type == "http://schemas.xmlsoap.org/claims/Group"]
=> issue(claim = c);'
Set-AdfsRelyingPartyTrust -TargetName $AzurePackTenantRelyingParty.Name -IssuanceTransformRules $IssuanceTransformRules -IssuanceAuthorizationRules $IssuanceAuthorizationRules -EnableJWT $true
Set-AdfsRelyingPartyTrust -TargetName $AzurePackAdminRelyingParty.Name -IssuanceTransformRules $IssuanceTransformRules -IssuanceAuthorizationRules $IssuanceAuthorizationRules -EnableJWT $true
#this will add back the SQL login for Azure Pack trough ADFS
$AzurePackSQLLogin = Add-AdfsClaimsProviderTrust -Name "Azure Pack SQL Login" -MetadataUrl https://$wapsqllogin/FederationMetadata/2007-06/FederationMetadata.xml -PassThru
$AcceptanceTransformRules = '@RuleTemplate = "PassThroughClaims"
@RuleName = "Pass through UPN"
c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"]
=> issue(claim = c);
@RuleTemplate = "PassThroughClaims"
@RuleName = "Pass trhough Name"
c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"]
=> issue(claim = c);
@RuleTemplate = "PassThroughClaims"
@RuleName = "Pass through Group"
c:[Type == "http://schemas.xmlsoap.org/claims/Group"]
=> issue(claim = c);'
Set-AdfsClaimsProviderTrust -TargetName $AzurePackSQLLogin.Name -AcceptanceTransformRules $AcceptanceTransformRules
Then on the Azure Pack Admin run this, again don't forget to change the URL's / SQL Servername:
$ConnectionString = 'Data Source=YOURSQLBOX;Initial Catalog=Microsoft.MgmtSvc.Config;User ID=sa;Password=P@ssw0rd'
#This will configure Tenant Portal to use ADFS
Set-MgmtSvcRelyingPartySettings -Target Tenant -MetadataEndpoint 'https://sts.<your-domain.fqdn>/FederationMetadata/2007-06/FederationMetadata.xml' -ConnectionString $ConnectionString –DisableCertificateValidation
#This will configure Admin portal to use ADFS
Set-MgmtSvcRelyingPartySettings -Target Admin -MetadataEndpoint 'https://sts.<your-domain.fqdn>/FederationMetadata/2007-06/FederationMetadata.xml' -ConnectionString $ConnectionString –DisableCertificateValidation
#below will add as extra option the (old wap) login available trough ADFS
Set-MgmtSvcIdentityProviderSettings -Target Membership -MetadataEndpoint 'https://sts.<your-domain.fqdn>/FederationMetadata/2007-06/FederationMetadata.xml' -ConnectionString $ConnectionString –DisableCertificateValidation
Best regards, Mark Scholman. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.