3,267 questions
Hi,
Unfortunately, it is not supported by the Azure AD B2C currently. You can upvote this feature here:
https://feedback.azure.com/d365community/idea/053840f3-c125-ec11-b6e6-000d3a4f0789
Connect to a Generic OpenID Connect using Azure Active Directory B2C using Authorization Code plus PKCE
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 48%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
James McLaren
110
Reputation points
Hi
We're trying to connect Azure AD B2C with a generic OIDC Identity Provider. The provider wants B2C to connect using the Authorization Code flow with PKCE as well as a client secret?
Is this an option supported by B2C?
Microsoft Security Microsoft Entra Microsoft Entra External ID
Microsoft Security Microsoft Entra Microsoft Entra ID
25,081 questions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 20%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator2023-08-09T10:27:07.04+00:00 Hi @James McLaren ,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
-
James McLaren 110 Reputation points
2023-08-09T10:36:48.8466667+00:00 Thanks Shweta - the answer is what I thought was the case. This is B2C doesn't support such an IdP integration. I would be interested in Microsoft's Security Architecture view as to whether an IdP to IdP integration should use PKCE if the client secret is also required?
-
Daniel Krzyczkowski 491 Reputation points MVP2023-08-09T11:50:04.08+00:00 Hi James, if the answer helped, could you please mark it so it can be helpful for others?
Thank you.
Sign in to comment