1: IAS Corporate Identity Provider scenario with Azure AD B2C To configure the federation scenario from this blog, start by following the steps described in Arpit’s blog post to create a setup similar as illustrated in figure 1:įig. We take a closer look at the custom policy files and how to use them for an advanced identity federation scenario between the Azure AD B2C and IAS tenants. This blog starts from the setup described in Arpit’s blog. In his setup, the custom policy files from the Azure AD B2C Custom Policy Starter Pack are deployed to the Azure AD B2C tenant using the B2C Identity Experience Framework (IEF) Setup App which automates the installation steps. Note: Arpit Oberoi thankfully described a typical integration scenario in his recent blog post where IAS delegates the user for authentication to an Azure AD B2C tenant by configuring the tenant as a corporate identity provider in IAS.

Custom policies are a set of XML files you upload to your Azure AD B2C tenant to define the behavior of your Azure AD B2C tenant. For more advanced and detailed configuration, IEF offers custom policies. IEF contains a set of predefined and configurable user flows for the most common customization tasks. With an Azure AD B2C tenant, the entire user experience for registration (sign-up), sign-in and profile editing can be highly customized with the Identity Experience Framework (IEF). Although it is built on the same underlying technology, Azure AD B2C is a seperate service from Azure AD with different capabilities enabling customers to use their preferred social identity, enterprise identity, or local accounts for SSO. Detailled setup instructions for Azure AD are well covered by SAP‘s and Microsoft‘s product documentation and related blog posts on this topic.Īzure Active Directory B2C (Azure AD B2C) is Microsoft’s customer identity access management (CIAM) solution. Many companies choose the latter option to setup identity federation between their tenants in IAS and Microsoft Azure Active Directory (Azure AD) to offer single sign-on (SSO) to corporate users and allow them to authenticate with their known credentials. SAP Cloud Identity Services, Identity Authentication (IAS), can act as an identity provider to authenticate users managed in its own local user store, or delegate authentication to an existing corporate identity provider and directory.

Azure b2c mfa