Azure API Management in consumption tier and Azure AD B2C

Aniruddha 1

Hi,

Does Azure API Management in consumption tier support integration with Azure AD B2C for end user authentication and authorization?

API Management pricing page indicates that in consumption tier, it does not support developer portal and Azure AD integration in developer portal, but doesn't specifically talk about Azure AD B2C.

Any details/ pointers appreciated.

Thanks

1 answer

MayankBargali-MSFT 69,941 Reputation points

2020-07-20T03:00:18.063+00:00

Hi @Aniruddha

Updated: The Developer portal feature is not available for the consumption tier. You can refer to this article that talks about AD B2C. There is no restriction and it should work with any tier.

Previous :This feature is not available for consumption tier. It is available in the Premium, Standard, and Developer tiers of API Management. This article will help you how to integrate Azure AD B2C with the API Management developer portal: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-aad-b2c

On how to validate JWT issued by Azure AD B2C in an API Management policy, please refer to https://learn.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies#ValidateJWT

Pricing details: https://azure.microsoft.com/en-us/pricing/details/api-management/
Please sign in to rate this answer.
Aniruddha 1 Reputation point

2020-07-20T09:37:29.09+00:00

Hi Mayank,

The first link you have shared is for authorizing developer accounts (in developer portal) using Azure AD B2C. Since developer portal feature is not available in API Management 'consumption' tier, I understand this functionality won't work or won't be available in 'consumption' tier.

What I am looking for is end-user sign-up, sign-in into our app using Azure AD B2C flows and then secure access to our APIs to end-users who have been authenticated with Azure AD B2C with API management validating those tokens with Azure AD B2C.
This article talks about that approach: https://learn.microsoft.com/en-us/azure/active-directory-b2c/secure-api-management?tabs=app-reg-ga

That article doesn't talk about any restrictions around using this functionality in 'consumption' tier. The pricing page doesn't cover this scenario, hence I believe there is some ambiguity around whats exactly supported in 'consumption' tier. Hence wanted to clarify.

MayankBargali-MSFT 69,941 Reputation points

2020-07-21T07:00:34.343+00:00

Hi @Aniruddha

Yes your understanding is correct that the link was for the developer portal.
You can refer to this article that talks about AAD B2C. There is no restriction and it should work with any tier.

Aniruddha 1 Reputation point

2020-07-21T08:23:17.51+00:00

Great, thanks.

MayankBargali-MSFT 69,941 Reputation points

2020-07-22T07:51:22.603+00:00

Hi @Aniruddha

I will proceed with closing this issue and updated the answer. If you have any follow up queries then feel free to tag me in your reply

Please 'Accept as answer' if it helped so that it can help others in the community looking for help on similar topics.
Sign in to comment

Share via

Azure API Management in consumption tier and Azure AD B2C

1 answer