How to register new users for MVC4 website on Azure AD

Question

I'm trying to use Azure AD Identity Provider for my MVC4 app and need to figure out how to implement a user registration functionality. I know that Graph API can be used for updating WAAD. However, from reading http://msdn.microsoft.com/en-us/library/windowsazure/dn151791.aspx I've got a sense that, in order to use Graph API, a user has to be authenticated through WAAD first. Only then will he receive a token to be used with Graph API. But what if I have an unregistered user who wants to register? How do I create an entry for him in WAAD? Can I somehow use the Service Principal to get the token, bypassing the user having to log in? How would I do that, if that's the case?

Answer 1

The application holds the permissions to read/write to WAAD. If the application is registered in WAAD, and contains the necessary write permissions, then the app and query WAAD and add new users to the directory.