How to generate public certiciate for Azure AD B2C ( SAML custom policy )

Question

Hi support,

We're going to have the deployment integrate with Azure AD B2C (SAML)
To connect with SAML, we need the have the certificate (X509) for signing and encrytion the request uploaded to B2C. On the DEV and TEST, we could use self-signed cerficate but on PROD, it would be best to have you generate the cert from public certificate authority.

To generate the cert, we need to add TXT domain for onmicrosoft.com?

How could we do that

-Subject "CN=yourappname.yourtenant.onmicrosoft.com" `

More detail document here:
https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy
In a production environment, we recommend using certificates that a public certificate authority has issued. But you can also complete this procedure with self-signed certificates.

Best,

Answer 1

Hello @Hiep To Dinh !

Welcome to Microsoft QnA!

For this procedure you cannot verify the onmicrosoft Domain

you need a Custom Domain to vaidate

https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-domain?pivots=b2c-user-flow

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards