Share via

AD B2C Okta integration

Marina Gurevich 1 Reputation point
2021-06-04T22:54:35.53+00:00

Hello,

We have a requirement to integrate ADB2C with Okta as an external Identity Provider. There are 3 use cases I see:

  1. Okta has users in the directory and those are users local to Okta.
  2. Okta has users imported from the on-prem Active Directory and authenticated with AD credentials via Okta.
  3. Okta has an Azure AD or other IDP configured as an external IDP (SAML or OIDC). To authenticate those users Okta /authorize url endpoint needs to be called and on each successful authentication an external IDP user becomes an JIT (just-in-time) Okta user, from what I've read in Okta docs.

I was able to set up B2C integration with Okta for #1 and #2 via B2C Custom policies. However, for the #3 I am wondering if it's even possible. And if yes than how.

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
3,255 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmanpreetSingh-MSFT 56,861 Reputation points Moderator
    2021-06-07T07:01:39.923+00:00

    Hi @Marina Gurevich · Thank you for reaching out.

    When B2C is added as external IDP to Okta, after a successful authentication, a token is passed by B2C to Okta. Azure AD B2C can't be configured with SCIM or any other protocol for user provisioning to its relying parties. Can Okta provisions users by utilizing the claims in the token issued by B2C, is a question for Okta.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

  2. priyanka kumari 81 Reputation points
    2021-08-31T14:04:07.977+00:00

    Hi Marina,

    i have similar use case
    Okta has users imported from the on-prem Active Directory and authenticated with AD credentials via Okta.

    can you please share the details and custom policy code how we can do that .

    awaiting eagerly for your response as we a project in progress.

    Thanks

    0 comments
  3. Marina Gurevich 56 Reputation points
    2021-09-09T16:01:34.32+00:00

    Sorry for late reply, I was on vacation.

    I registered a new OIDC App Integration in OKTA pointing the sign-in redirect uri to the B2C instance. https://developer.okta.com/docs/guides/add-an-external-idp/apple/register-app-in-okta/

    Also, you need to configure an Access Policy in Okta for your OIDC Application.

    For custom policies in B2C I used the examples in this link https://github.com/mleziva/azure-b2c-okta-custom-policy

    Let me know if you have further questions.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.