B2C: Block sign in for Social (Google, Facebook) and other external IDPs

Question

There is a possibility to Block Sign-In for AD users using Block Sign-In property in b2c. It is general solution to use "accountEnabled" property to manage it via Graph API.

But it seems it doesn't work for external IDPs.

The only solution which I found is to create custom claim for b2c user such as "extension_accountEnabled" and validate it in custom steps of b2c custom policies.

https://stackoverflow.com/questions/63599125/azure-ad-b2c-disable-block-sign-in-for-social-federated-users

Question: Is this any way around to achieve blocking users with external IDPs from signing into B2c without using custom claims and custom policy steps but using standard b2c / graph tools?

Thanks.

Answer 1

Hi @Mikhail Delly , thanks for the question. I did some research and unfortunately you're correct that there's no direct way to do this with the Graph API. You'll have to use the custom policies for this. I'll reach out and see if there are any easier ways to do this, but currently there is no way to do this with the Graph API. Please let me know if you have any questions.

If this answer helped you please mark it as "Verified" so other users can reference this.

Thank you,

James