Multi identity-provider multicustomer saas application- identity-provider problem

Question

Hello, I have the custom saas application with local authentication for all users (local database with login and password). I would like to integrate with many idp of my customers ie. Entra id. There is a lot of account so I dont want to create guest account for everyone in my entra id tenant. How can i integrate with many idp of my clients? I read about azure b2c but this is very helpful for authentication but i dont know how to implement authorization for thats accounts (abac or rbac). Is this possible to create custom attribute in entra id customer and proxy this attribute through azure b2c to my application? Any suggestions?

Answer 1

Hi @Buczek Piotr .

Thanks for reaching out to Microsoft Q&A

As of Today, the only option available to help in your scenario would be to use B2B users. However, there is a better approach of using it which is the Cross-Tenant Synchronization feature.

Cross-tenant synchronization automates creating, updating, and deleting Microsoft Entra B2B collaboration users across tenants in an organization.

Here are the primary goals of cross-tenant synchronization:

• Seamless collaboration for a multitenant organization
• Automate lifecycle management of B2B collaboration users in a multitenant organization
• Automatically remove B2B accounts when a user leaves the organization

You can find more information about this feature on this document: https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchronization-overview

This might not be what you were expecting, but I hope it helps you.

Thanks,

Fabio

Answer 2

@Buczek Piotr

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

---

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.