Creating Azure B2C local accounts with randomly generated passwords-
# Install required modules (if not already installed)
Import-Module Microsoft.Graph
Import-Module ImportExcel
# Variables
$ clientId = “<<clientid>>”
$ clientSecret = “<<clientsecret>>”
$ tenantId = “<<tenantid>>”
$ issuerDomain = “<<domain>>.onmicrosoft.com” # The Azure B2C issuer domain
# FilePath to your Excel file
$ excelFilePath = “C:\Stage\PowershellScript\users.xlsx”
$ logFilePath = “C:\Stage\PowershellScript\logfile.txt”
# Function to authenticate and get an access token
function Get-GraphAccessToken {
$ body = @{
client_id = $ clientId
scope = “https://graph.microsoft.com/.default”
client_secret = $ clientSecret
grant_type = “client_credentials”
}
$ tokenResponse = Invoke-RestMethod -Method Post -Uri “https://login.microsoftonline.com/$ tenantId/oauth2/v2.0/token” -ContentType “application/x-www-form-urlencoded” -Body $ body
return $ tokenResponse.access_token
}
# Function to create a user in Azure B2C
function Create-B2CUser($ accessToken, $ firstName, $ lastName, $ email, $ password) {
$ userPayload = @{
accountEnabled = $ true
displayName = “$ firstName $ lastName”
givenName = $ firstName
surname = $ lastName
mailNickname = $ email -replace “@”, “-“
mail = $ email
passwordProfile = @{
forceChangePasswordNextSignIn = $ true
password = $ password
}
identities = @(
@{
signInType = “emailAddress”
issuer = $ issuerDomain
issuerAssignedId = $ email
}
)
}
$ jsonPayload = $ userPayload | ConvertTo-Json -Depth 10
$ uri = “https://graph.microsoft.com/v1.0/users”
$ headers = @{
“Authorization” = “Bearer $ accessToken”
“Content-Type” = “application/json”
}
$ response = Invoke-RestMethod -Method Post -Uri $ uri -Headers $ headers -Body $ jsonPayload
return $ response
}
# Generate a random strong password
function Generate-StrongPassword {
return [System.Web.Security.Membership]::GeneratePassword(12, 4)
}
# Function to write logs to a file
function Write-Log($ message) {
$ timestamp = Get-Date -Format “yyyy-MM-dd HH:mm:ss”
$ logMessage = “$ timestamp – $ message”
Add-Content -Path $ logFilePath -Value $ logMessage
}
# Get access token
$ accessToken = Get-GraphAccessToken
# Read Excel file and create users
$ users = Import-Excel -Path $ excelFilePath
foreach ($ user in $ users) {
$ firstName = $ user.FirstName
$ lastName = $ user.LastName
$ email = $ user.Email
$ password = Generate-StrongPassword
try {
$ response = Create-B2CUser -accessToken $ accessToken -firstName $ firstName -lastName $ lastName -email $ email -password $ password
$ successMessage = “Successfully created user: $ ($ response.displayName) ($ email)”
Write-Host $ successMessage
Write-Log $ successMessage
}
catch {
Write-Host “Error creating user $ email”
Write-Log “Error creating user $ email”
}
}
