Federated SAML Login

Question

Hi

Can a SAML based Service Provider log into Azure AD B2C using a SP initiated Login and B2C federate the login attempt to another SAML IdP using the SP initiated Login?

Answer 1

@James McLaren

Yes, this is available in Azure B2C.

Organizations that use Azure AD B2C as their customer identity and access management solution might require integration with applications that authenticate by using the SAML protocol. The following diagram shows how Azure AD B2C serves as an identity provider (IdP) to achieve single-sign-on (SSO) with SAML-based applications.

The application creates a SAML AuthN request that's sent to the SAML sign-in endpoint for Azure AD B2C.

The user can use an Azure AD B2C local account or any other federated identity provider (if configured) to authenticate.

If the user signs in by using a federated identity provider, a token response is sent to Azure AD B2C.

1. Azure AD B2C generates a SAML assertion and sends it to the application.

You can also refer to below article.

https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy#overview

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.