This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 77%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHP%3C/text%3E%3C/svg%3E)
We are tying to implement multiple Identity providers using Azure B2C custom policies, how can we differentiate between each Identity provider, one page where all users can login and authenticate against their respective auth Provider, and custom policy should pick the right auth provider based on the domain provided by the user.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 20%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Hi @Hemanth Potluri ,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,
Shweta
Thank you @swethamathur. I did try the suggested process, instead of placing multiple buttons. Can we pick the right Technical profile by domain hint?
My use case: I have 3 identity providers as "oneLogin","Okata","Paylocity", and based on domain hint I want to serve the right IDP login page to user. The initial request based on "domain_hint" can come through SP initialized or IDP initialized flows.
Can you suggest some thing on this. Currently I have defined separate claims providers for all three Idps' and only one works if I make request through domain_hint. How can this work multiple Idps.
To support domain hint parameter, you can configure the domain name using the <Domain>domain name</Domain> XML element of any <ClaimsProvider>.
<ClaimsProvider>
<!-- The following Domain element allows this profile to be used if the request comes with domain_hint
query string parameter, e.g. domain_hint=facebook.com -->
<Domain>facebook.com</Domain>
<DisplayName>Facebook</DisplayName>
Once you configure you need to append domain_hint for your run now URL. In Facebook case your run now URL going to be like (after appending domain_hint)
Reference: https://learn.microsoft.com/en-us/azure/active-directory-b2c/direct-signin?pivots=b2c-custom-policy
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 49%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOP%3C/text%3E%3C/svg%3E)
Does this only apply for social accounts?
What about multiple oauth claims providers in a B2B flow?
Hi @Hemanth Potluri ,
Thanks for reaching out.
Azure AD B2C supports to implement multiple identity providers at the same time using user flow as well with custom policies.
Azure AD B2C presents a list of multiple identity providers the user can choose for sign-in. Once they select one of the external identity providers that supports OAuth 1.0, OAuth 2.0, OpenID Connect, and SAML protocols. They're taken (redirected) to the selected provider's website to complete the sign in process.
Custom policy allows you to add multiple technical profile to configure different identity providers based on their domain and other related attributes.
<ClaimsProvider>
<Domain>salesforce.com</Domain>
<DisplayName>Salesforce</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="Salesforce-SAML2">
<DisplayName>Salesforce</DisplayName>
<Description>Login with your Salesforce account</Description>
<Protocol Name="SAML2"/>
-----
<ClaimsProvider>
After adding identity provider based on your choice, the page will look like below while will allow your consumers to login via any identity providers from the list.
Reference: https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-identity-provider
Hope this will help.
Thanks,
Shweta
------------------------------
Please remember to "Accept Answer" if answer helped you.