Share via

Multiple organizations to authenticate with their Microsoft Entra ID (Work/School)

Fispoke DevOps 20 Reputation points
2026-03-02T03:11:23.1+00:00

I am working on angular UI. Which is configured with Azure AD B2C using user flow.
Can we enable a single “Sign in with Microsoft” button that allows users from multiple organizations to authenticate with their Microsoft Entra ID (Work/School) accounts through our B2C user flow B2C_1_NONMFA, without creating a separate IdP configuration per tenant?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Shubham Sharma 11,185 Reputation points Microsoft External Staff Moderator
    2026-03-02T08:54:43.1366667+00:00

    Hello Fispoke DevOps

    Thank you for reaching out to Microsoft Q&A.

    You can absolutely avoid one IdP per tenant by treating Azure AD itself as a “multi-tenant” OpenID Connect provider in your B2C user flow. Here’s the high-level approach:

    1. Register a multi-tenant Azure AD app
      • In the Azure portal, go to App registrations in your B2C (or a linked) tenant.
      • Create a new app, set Supported account types to “Accounts in any organizational directory (Any Azure AD directory – Multi-tenant)”.
      • Expose a redirect URI pointing back to your B2C callback (https://<your-b2c-tenant>.b2clogin.com/<your-b2c-tenant>/oauth2/authresp).
      • Generate a client secret.
    2. Wire it up as an OpenID Connect IdP in B2C
    3. Include that provider in your user flow
      • Edit your B2C_1_NONMFA user flow, go to Identity providers, and toggle on your new “AzureAD-MultiTenant” entry.
      • Now you’ll get a single “Sign in with Microsoft” button that federates to any Entra ID tenant.

    Behind the scenes this works because you’re pointing B2C at the “organizations” (or “common”) endpoint rather than a fixed tenant GUID. No per-tenant configs needed.

    Hope that helps—let me know if you need a deeper dive on registering the app, setting up the metadata URL or scopes, or if you plan to move to the newer Microsoft Entra External ID experience once B2C is retired.

    Reference docs:

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.