Multi identity-provider multicustomer saas application- identity-provider problem

Buczek Piotr 0 Reputation points
2023-11-26T04:02:27.72+00:00

Hello, I have the custom saas application with local authentication for all users (local database with login and password). I would like to integrate with many idp of my customers ie. Entra id. There is a lot of account so I dont want to create guest account for everyone in my entra id tenant. How can i integrate with many idp of my clients? I read about azure b2c but this is very helpful for authentication but i dont know how to implement authorization for thats accounts (abac or rbac). Is this possible to create custom attribute in entra id customer and proxy this attribute through azure b2c to my application? Any suggestions?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

2 answers

Sort by: Most helpful
  1. Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator
    2023-11-27T19:53:11.0533333+00:00

    Hi @Buczek Piotr .

    Thanks for reaching out to Microsoft Q&A

    As of Today, the only option available to help in your scenario would be to use B2B users. However, there is a better approach of using it which is the Cross-Tenant Synchronization feature.

    Cross-tenant synchronization automates creating, updating, and deleting Microsoft Entra B2B collaboration users across tenants in an organization.

    Here are the primary goals of cross-tenant synchronization:

    • Seamless collaboration for a multitenant organization
    • Automate lifecycle management of B2B collaboration users in a multitenant organization
    • Automatically remove B2B accounts when a user leaves the organization

    You can find more information about this feature on this document: https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchronization-overview

    This might not be what you were expecting, but I hope it helps you.

    Thanks,

    Fabio

    0 comments No comments

  2. Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator
    2023-12-06T23:51:43.8366667+00:00

    @Buczek Piotr

    I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

    If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.


    If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.