ADB2C or Azure Ad...? Generic oidc idp

Question

Good morning !

I have the following challenge to accomplish:

We are using one IDP.
We would like to "connect"(federate) that one with adb2c or aad.

The aim is that :
-users with external accounts can connect and use applications which are registered to AAD/Adb2c and some others application authenticating by our généricité IDP.

• SSO is mandatory.

The imagined solution is to sync identities with something using SCIM protocol between the 2 idps and so federate(by using oidc) our current idp with aad or adb2c in order to make sso available for all identities.

That means that users can access apps through our 2 idps.

I'm not and identity expert and so i would like to know if someone already did it and if this is really possible.

Many thanks at all for your help and insights!

Answer 1

Hello @Cloudy and thanks for reaching out. For the sake of simplicity my recommendation is to use Azure AD B2C as the main IdP and federate your current one and/or others. You can you use both SAML or OIDC. Although Azure AD B2C does not support SCIM you can create your own implementation using the MS Graph AP. Out of the box, SSO will be enabled for the whole tenant.

Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.