Quickstart: Create and assign a user account

In this quickstart, you use the Microsoft Entra admin center to create a user account in your Microsoft Entra tenant. After you create the account, you can assign it to the enterprise application that you added to your tenant.

We recommend that you use a nonproduction environment to test the steps in this quickstart.

Prerequisites

To create a user account and assign it to an enterprise application, you need:

• A Microsoft Entra user account. If you don't already have one, you can Create an account for free.
• One of the following roles: Cloud Application Administrator, or owner of the service principal. You need the User Administrator role to manage users.
• Completion of the steps in Quickstart: Add an enterprise application.

Create a user account

Tip

Steps in this article might vary slightly based on the portal you start from.

To create a user account in your Microsoft Entra tenant:

1. Sign in to the Microsoft Entra admin center as at least a User Administrator.
2. Browse to Identity > Users > All users
3. Select New user at the top of the pane and then, select Create new user.
4. In the User principal name field, enter the username of the user account. For example, contosouser1@contoso.com. Be sure to change contoso.com to the name of your tenant domain.
5. In the Display name field, enter the name of the user of the account. For example, contosouser1.
6. Enter the details required for the user under the Groups and roles, Settings, and Job info sections.
7. Select Create.

Assign a user account to an enterprise application

To assign a user account to an enterprise application:

1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.

2. Browse to Identity > Applications > Enterprise applications > All applications. For example, the application that you created in the previous quickstart named Microsoft Entra SAML Toolkit 1.

3. In the left pane, select Users and groups, and then select Add user/group.

   

4. On the Add Assignment pane, select None Selected under Users and groups.

5. Search for and select the user that you want to assign to the application. For example, contosouser1@contoso.com.

6. Select Select.

7. Select None Selected under Select a role and then select the role that you want to assign to the user. For example, Standard User.

8. Select Select.

9. Select Assign at the bottom of the pane to assign the user to the application.

After you assign the user to the application, ensure you set the application to be visible to the user. To make it visible to assigned users, select Properties in the left pane, and then set Visible to users? to Yes.

Clean up resources

If you're planning to complete the next quickstart, keep the application that you created. Otherwise, you can consider deleting it to clean up your tenant.

Next steps

Learn how to set up single sign-on for an enterprise application.

Enable single sign-on