Setup Microsoft CIAM IDP proxy

Question

Hi,

I am new to Microsoft AD CIAM. I wanted to understand how to achieve a phased migration from current Oracle IAM(IdP) to Microsoft AD CIAM. Phased migration means moving the existing Oracle integrated apps to the new Microsoft CIAM platform in a phased manner while ensuring the Single Sign On experience is not impacted to the end user.

To explain it better consider the below scenarios -

Present - Oracle IdP - App1 and App2 participating in SSO

Desired State - Oracle IdP - App1 and Microsoft IdP - App2 , participating in SSO

What should be the design for SSO so as to accomodate both the IdPs at the same time ? Can we configure Microsoft CIAM as IdP Proxy to route the request to either Oracle for App1 and Microsoft for App2.

Any feedback and/or recommendations are most welcome.

Thanks,
Abhi

Answer 1

Hello @Abhijeet Kumar2 , with Azure B2C you can configure federated identity providers using SAML or OIDC/OAuth. Federated SSO is not controlled by Azure B2C but by the federated identity provider which allow a federated user to sign into an Azure B2C application and later (if the user session is still valid/alive) to sign into the federated provider application.

Let us know if this answer was helpful to you. If so, please remember to accept it so that others in the community with similar questions can more easily find a solution.