Passwordless authentication using email only in B2C

NHering22101 106 Reputation points
2021-04-05T12:30:37.67+00:00

I can see that there is a phone only authentication (in public preview ) https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-local?pivots=b2c-user-flow#phone-or-email-sign-in-preview
Is there a similar flow to sign using only email, then get a magic link in the email and use that one to sign up/in? In other words, sign in only with email, without ever setting up a password.

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,652 questions
0 comments
Accepted answer
  1. soumi-MSFT 11,716 Reputation points Microsoft Employee
    2021-04-22T13:44:16.65+00:00

    Hello @NHering22101 , thank you for reaching out. You can certainly use the following sample "https://github.com/azure-ad-b2c/samples/tree/master/policies/sign-in-with-magic-link". This works absolutely fine and this sample enables you to sign-in using just the email and no password is required here. This sample uses the Magic-Link that gets sent to the entered email and clicking on that magic-link gets the user logged in to B2C.

    Note: When using id_token_hint, you are the IDP and giving Azure AD B2C the hint. Hence you need to have a metadata endpoint. B2C can host it for you if you use the above link, but you are sharing with us the Private Key, and you may not want to do that since as an IdP you don't share your private keys

    Hope this helps.

    Do let us know if this helps and if there are any more queries around this, please do let us know so that we can help you further. Also, please do not forget to accept the response as Answer; if the above response helped in answering your query.

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 21,851 Reputation points Microsoft Employee
    2021-04-05T20:58:44.503+00:00

    Hi @NHering22101 , the only way to do this currently is by using the Outlook client app. This document details how you can customize MFA through the app. If you're not currently using it, you can easily add the Outlook Cloud App to your conditional access policy. Please let me know if you have any questions!

    If this answer helped you, please mark it at "Verified" so other users may reference it.

    Thank you,

    James