Hi I want to migrate users from a system to Azure AD B2C. I want to know the steps or ways to achieve this. I tried the bulk user create using csv but that allows only onmicrosft.com domains (verified domains). I need to migrate users with any username such as gmail outlook etc or even phone numbers. Please help

Hi anonymous user • Thank you for reaching out. For user migration, below are the 4 options that you have. Just in time migration v1 - In this sample, Azure AD B2C calls a REST API that validates the credential, and migrates the account with a Graph API call. Just in time migration v2 - In this sample, Azure AD B2C calls a REST API to validate the credentials, return the user profile to B2C from an Azure Table, and B2C creates the account in the directory. Seamless-account-migration - Where accounts have been pre-migrated into Azure AD B2C and you want to update the password on the account on the initial sign-in. Azure AD B2C calls a REST API to validate the credentials for accounts marked as requiring migration (via attribute) against a legacy identity provider, returns a successful response to Azure AD B2C, and Azure AD B2C writes the password to the account in the directory. B2C to B2C Migration - Migrate users from one B2C instance to another using just-in-time migration. Please go through these samples to identify the one that best addresses your requirement. ----------------------------------------------------------------------------------------------------------- Please " Accept the answer " if the information helped you. This will help us and others in the community as well.

Azure AD B2C | Seamless Migration

Accepted answer

AmanpreetSingh-MSFT 56,311 Reputation points

2022-05-11T06:45:39.97+00:00
Hi anonymous user • Thank you for reaching out.

For user migration, below are the 4 options that you have.

Just in time migration v1 - In this sample, Azure AD B2C calls a REST API that validates the credential, and migrates the account with a Graph API call.

Just in time migration v2 - In this sample, Azure AD B2C calls a REST API to validate the credentials, return the user profile to B2C from an Azure Table, and B2C creates the account in the directory.

Seamless-account-migration - Where accounts have been pre-migrated into Azure AD B2C and you want to update the password on the account on the initial sign-in. Azure AD B2C calls a REST API to validate the credentials for accounts marked as requiring migration (via attribute) against a legacy identity provider, returns a successful response to Azure AD B2C, and Azure AD B2C writes the password to the account in the directory.

B2C to B2C Migration - Migrate users from one B2C instance to another using just-in-time migration.

Please go through these samples to identify the one that best addresses your requirement.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

1 person found this answer helpful.
Abhay Chandramouli 966 Reputation points

2022-05-11T07:13:19.817+00:00

Hi @AmanpreetSingh-MSFT ,
thanks for the answer,

These are custom policy based. Is there a way we can migrate the users beforehand ? and not use the Azure built in login page ?
Our scenario is something like this
We login into "our" login page and then use these credentials to create(if not exist)/update the user in Azure AD B2C using graph APIs.

AmanpreetSingh-MSFT 56,311 Reputation points

2022-05-11T07:41:30.167+00:00

anonymous user • In that case, you can use the Graph Call provided here: Create a user with social and local account identities and to combine multiple requests for bulk user creation, use JSON Batching.

Abhay Chandramouli 966 Reputation points

2022-05-12T04:22:57.017+00:00

Hi @AmanpreetSingh-MSFT ,

So json batching and csv are the only ways available to migrate users ? And what about my question on the different domains I would like in the userPrincipalName which is not allowed in CSV method ?

I am able to register users with any domain email / mobile via the user flow login or custom policy login, but how to bulk create users with different domains ?

Thanks

Abhay Chandramouli 966 Reputation points

2022-05-12T10:02:55.847+00:00

@AmanpreetSingh-MSFT if you can help here ?

AmanpreetSingh-MSFT 56,311 Reputation points

2022-05-16T05:41:46.32+00:00

anonymous user • Please find my comments inline.

So json batching and csv are the only ways available to migrate users ?
Yes, with the user flows, there are limited options, so as of now you only have the json batching and csv options.

And what about my question on the different domains I would like in the userPrincipalName which is not allowed in CSV method ?
In any Azure AD or Azure AD B2C you can have the UPNs with either tenant's .omicrosoft.com domain or a custom domain verified in the tenant. You cannot create users with multiple domains that doesn't belong to your tenant.

I am able to register users with any domain email / mobile via the user flow login or custom policy login, but how to bulk create users with different domains ?
Users registered in B2C using any IDP get created with Random UPNs like cpim_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx@your_tenant.onmicrosoft.com. For example, if you register a user using Google IDP, the UPN will be in the above format and the Gmail address is actually stored in the otherMails attribute.
"otherMails": [ "username@gmail.com" ],
You can see all these details by using https://graph.microsoft.com/beta/users/obj_id_of_the_user call.
Sign in to comment

Azure AD B2C | Seamless Migration

0 additional answers