Adding 'Login with Microsoft' to a Entra External ID user flow.

Question

Hello there,

We're currently building an application that leverages Microsoft Entra External ID to authenticate users. I'm running into an issue where my user flow doesn't authenticate users who have an existing Entra ID account (i.e., an external tenant).

I have created an App Registration for the single page application being developed, with the 'Supported account types' setting as 'Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)' and, using @azure/msal-browser, can successfully authenticate and retrieve ID and access tokens for use in our application using an account from our primary Entra ID tenant.

I have created and attached a User Flow to the application and can successfully login with a local account.

My current solution has our application adjusting the authority parameter of the loginRedirect function to determine which login portal to send the user to, however I'd rather just send all users to my Entra External IDs login and handle both Entra ID and Local Accounts in one place.

Is there a way I can edit the Entra External ID login screen to include a 'Continue with Entra ID' button for B2B customers to use to login? Even better, is there a way enable Home Realm Discovery to allow the login to handle both Local Accounts and Entra ID accounts? The documentation on Entra ID appears incomplete, and frequently says something is possible but is very light on the details on how to achieve it.

Dan

Answer 1

Hi @Swivel1660 ,

Thanks for reaching out.

I understand that you are trying to federate accounts from different Entra tenants, but not able in sign in with those accounts directly. Please let me know if my understanding is not correct.

In, external ID for customers Microsoft Entra ID Sign up option is unavailable as of now. However, customers can sign up as local account using an email from another Microsoft Entra organization.

Is there a way I can edit the Entra External ID login screen to include a 'Continue with Entra ID' button for B2B customers to use to login? Even better, is there a way enable Home Realm Discovery to allow the login to handle both Local Accounts and Entra ID accounts?

As of now, this feature is not available in External ID. I would suggest share you feedback here for future enhancements.

https://feedback.azure.com/d365community/forum/22920db1-ad25-ec11-b6e6-000d3a4f0789

Reference - https://learn.microsoft.com/en-us/entra/external-id/customers/concept-supported-features-customers

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.