I found the following documentation about Entra ID. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/quickstart-app-registration-limits I would like to know if this documentation: Also apply for Azure B2C Can this custom role also be applied to a service principal so that service principal is not limited to creating max 250 app registrations?

Hi @Ralph Jansen , Thanks for reaching out. I would say, some of the Entra ID limits apply to B2C as well. Not all are feature limits specified in Entra ID limits document are applicable to B2C. There is no specific limit for App Registrations in a tenant. The limit is for overall number Directory Objects in a tenant, which includes, Users, Groups, Applications, servicePrincipals and so on. Hope this will help. Thanks, Shweta Please remember to " Accept Answer " if answer helped you.

Hi @Ralph Jansen In Azure AD B2C, you can create 20 tenants per subscription. But you can increase this limit by contacting Microsoft Support. For each tenant, it can contain 1.25 Million objects by default that includes user accounts and apps. when you verify a custom doamain for your tenant, this limits increases to 5.25 Million. To increase this limit, you can contact Microsoft Support. Refer: https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-tenant Hope this helps

Can app registration limits also be removed on Azure B2C just like in Entra ID

Accepted answer

Shweta Mathur 27,691 Reputation points Microsoft Employee

2024-04-17T06:28:33.64+00:00

Hi @Ralph Jansen ,

Thanks for reaching out.

I would say, some of the Entra ID limits apply to B2C as well. Not all are feature limits specified in Entra ID limits document are applicable to B2C.

There is no specific limit for App Registrations in a tenant. The limit is for overall number Directory Objects in a tenant, which includes, Users, Groups, Applications, servicePrincipals and so on.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.
Please sign in to rate this answer.
Ralph Jansen 106 Reputation points

2024-04-17T08:06:57.7433333+00:00

Hi,
Thank you for the comment. Well I know for sure there is a limit of 250 in Entra. I reached the limit a couple of times. The Microsoft documentation (here in my question) also describes how to bypass that limit of 250. So that's why I asked the question.
We need to know this because of our application design choices.

If I have time, I will test it my self.

Shweta Mathur 27,691 Reputation points Microsoft Employee

2024-04-19T05:53:39.6633333+00:00

Ralph Jansen

Even that documentation mentioned the limit of 250 on objects only.

However, most of the time object utilization is on applications, due to which custom role has been provided to increase the quota of overall objects in the tenant.

Ralph Jansen 106 Reputation points

2024-04-19T08:14:41.8566667+00:00

Exactly! And that is exactly my question.

I want to use 1 app registration (with a service principal connected to it) to create more than 250 other app registrations. So 1 app registration creates more than 250 app registrations. I want to do that with the Microsoft Graph.
I want to do that inside Azure AD B2C.

So my question, is the documentation that describes this with the custom role also applicable on Azure AD B2C and on service principals?

Shweta Mathur 27,691 Reputation points Microsoft Employee

2024-04-22T04:16:12.2566667+00:00

Ralph Jansen Custom role is out of box in Azure AD B2C and not supported in similar way as mentioned in Entra ID documentation.

Furthermore, as previously indicated, the Azure AD B2C tenant permits a total of 1.25 million objects, which should be adequate for most scenarios. However, if your specific case demands more, you have the option to utilize a custom domain or request an increase in the quota.

Thanks,

Shweta

Ralph Jansen 106 Reputation points

2024-04-22T07:44:15.5133333+00:00

Sorry, I don't understand the first part "Custom role is out of box". Is custom Entra roles not supported in Azure AD B2C?

I understand dat 1.25 million objects is adequate but not if I can only create 250 items in the scenario I mentioned before.
I will try to create a test.

Shweta Mathur 27,691 Reputation points Microsoft Employee

2024-04-22T09:44:23.7333333+00:00

Ralph Jansen

As mentioned, custom role is not supported in Azure AD B2C.

However, there are ways to get custom role using extension_attribute and calling REST API.

Furthermore, the functionality you are looking for is not supported in Azure AD B2C.

Ralph Jansen 106 Reputation points

2024-04-23T12:30:46.1366667+00:00

Ok that was the solution I was looking for. Then Azure B2C will not going to work for us.
Sign in to comment

Can app registration limits also be removed on Azure B2C just like in Entra ID

1 additional answer