25,129 questions
How to setup a SSO with azure AD B2C and external IDP Rsk.SAML
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 5%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERY%3C/text%3E%3C/svg%3E)
Rahul Yendhe
0
Reputation points
We need to setup a SSO and we leverages the custom policy Azure AD B2C mechanism to set up B2C to talk to other Identity Providers.
Under Azure AD B2C we have App registration and Supported account types option has set to "Accounts in any identity provider or organizational directory (for authenticating users with user flows)" This option enables you to target local accounts and the widest set of user identities from Microsoft, Facebook, Google, Twitter, or any OpenID Connect provider.
We have a use case where as an IDP, We are using Rsk.SAML, which is a library for use with IdentityServer.
I am not seeing any article from Microsoft which talk on this. How to set up IDP to communicate with Azure AD B2C.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 51%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
dashanan13 930 Reputation points2023-06-09T11:47:01.67+00:00 Hei @Rahul Yendhe ,
Thanks for reaching out to Microsoft Q and A.
It would help to assist if you could clarify a few points so my understanding is similar to you.
-
- Are you trying to set up an application with Azure B2C such that it can accept sign-in requests from identity providers that the application customers use?
Or
- Are you trying to create an identity provider that can respond to Azure B2C's request for authentication on behalf of the application registered with it?
In either case, IDP does not contact Azure AS B2C, the authentication request is always initiated by the application and carried out by Azure B2C to verify the user for the application.
Read more about Azure B2C SSO options here
-
Sign in to comment
Sign in to answer