Azure AD B2C to accept inbound SAML federation

Question

Azure AD B2C to accept inbound SAML federation

svijay 1

Is it possible to configure Azure AD B2C to accept in an inbound SAML federation from an external IDP? From what i learnt, it is possible through Custom Policies. But i have not been able to get it working. Any examples would be helpful.

AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-09-08T13:24:52.483+00:00

Hi @svijay • Are you looking for a flow as mentioned below?
Application > External SAML based IDP > Azure AD B2C
svijay 1 Reputation point

2021-09-08T14:09:32.757+00:00

I am referring to the flow
External Users -> External SAML Based IDP -> Azure AD B2C -> Application
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-09-09T10:26:45.843+00:00
Hi @svijay • The flow is supposed to be

External user access the application

Application (Relying Party) redirects (http 302) to the External SAML Based IDP, due to RP<-->IDP trust.

In the home realm discovery page of External SAML Based IDP, user clicks on Azure AD B2C button.

Azure AD B2C issues the token to External SAML Based IDP, which then issues the token to the Application.

If the application trusts External SAML Based IDP (RP<-->IDP trust), it will not trust the token issued by B2C and will throw an error.

Can you confirm whether your application is federated with Azure AD B2C or with the External SAML Based IDP?
Rakesh Jagatap 11 Reputation points Microsoft External Staff

2021-10-11T14:52:08.6+00:00

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

1 answer

Your answer

AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-09-08T13:24:52.483+00:00

Hi @svijay • Are you looking for a flow as mentioned below?
Application > External SAML based IDP > Azure AD B2C
svijay 1 Reputation point

2021-09-08T14:09:32.757+00:00

I am referring to the flow
External Users -> External SAML Based IDP -> Azure AD B2C -> Application
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-09-09T10:26:45.843+00:00

Hi @svijay • The flow is supposed to be

External user access the application

Application (Relying Party) redirects (http 302) to the External SAML Based IDP, due to RP<-->IDP trust.

In the home realm discovery page of External SAML Based IDP, user clicks on Azure AD B2C button.

Azure AD B2C issues the token to External SAML Based IDP, which then issues the token to the Application.

If the application trusts External SAML Based IDP (RP<-->IDP trust), it will not trust the token issued by B2C and will throw an error.

Can you confirm whether your application is federated with Azure AD B2C or with the External SAML Based IDP?
Rakesh Jagatap 11 Reputation points Microsoft External Staff

2021-10-11T14:52:08.6+00:00

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

Answer 1

AmanpreetSingh-MSFT 56,871 Moderator

Hi @svijay • Based on my understanding, I am sharing below sample that can work for you:

https://github.com/azure-ad-b2c/saml-sp/blob/master/source-code/adfs-claims-provider/readme.md

Please let me know if this is what you are looking for or if you have any questions.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-09-16T10:29:22.667+00:00

Hi @svijay • Just checking if you had a chance to look into it.

Share via

Azure AD B2C to accept inbound SAML federation

1 answer

Your answer