Client IDP Send à SAML Response -> Azure B2C (SP) -> Consume SAML Response

Question

Client IDP : External IDP initiating the IDP flow. (Not Azure B2C any external IDP )

Azure B2C : Acting as Service Provider

We are looking for below IDP Flow in terms of Client IDP supporting IDP initiated flow. The originator is Client IDP.

Client IDP Send à SAML Response -> Azure B2C (SP) -> Consume SAML Response -> Registered Application

 

Our understanding is that below article is implementing above flow as mentioned below . Please review it. 

https://medium.com/the-new-control-plane/using-azure-ad-b2c-as-a-saml-idp-with-the-idp-initiated-flow-d80e76864474

There is another https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider-options?pivots=b2c-custom-policy#configure-idp-initiated-flow which is contradicting.

Answer 1

@TUHIN SINHA

Thank you for posting your query on Microsoft Q&A.

From above description I could understand that you are looking for IDP initiated flow with a federated (external/3rd party) IDP in Azure B2C. Please do correct me if this is not the case by responding in the comments section.

As mentioned in our documentation referring Configure IdP-initiated flow, we don't currently support scenarios where the initiating identity provider is an external identity provider federated with Azure AD B2C, such as Active Directory Federation Services or Salesforce. IdP-initiated flow is supported only for local account authentication in Azure AD B2C.

The reference given in 3rd party document is not tested by or validated by Microsoft. I would recommend you to test it with 2-5 test users only as any configurational break-fix issues would not be assisted by Microsoft support.

I would recommend to use the SP initiated flow if possible and post this request on our Feedback portal which is monitored by our Dev Team.

Please do let me know if you have any queries by responding the comments section.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.