Explore Microsoft Entra External ID for Customers - next generation of Azure AD B2C

This video introduces Microsoft Entra External ID - a next-generation customer identity and access management (CIAM) solution for managing all external identities.

Helpful links:

Product official page with trial:

Microsoft Entra External ID for customers documentation:

Official announcement on the blog:

[kawaiicare]

Thank you for bringing some light to my headaches with Microsoft entra 💓

[chadhasbrook]

Thanks for sharing the link and putting together these videos.

[MartinPower]

Super useful and insightful video. We are looking to use Azure as a CIAM. One requirement is to allow existing internal users from our existing AD account to have access to the 'Customer' tenant application.

It looks like these users will have to be invited into the Customer tenant, using the B2B flow if im not mistaken? It would be nice to have more control over that but it seems currently there is less configurability around the "Active Directory Identity Provider".

[Jacob-Clinton]

Thank you for this. It is definitely one of the best information sources for this product that I've found. My company has been using Azure AD B2C for all of our CIAM needs but it's looking like External ID is the way to go. Could you explain how we'd go about migrating from one to the other as information on this topic is quite limited? I understand that External ID is a new product and migrating away from B2C is not required at this time. That said, we have all agreed that it would be better for us to migrate sooner rather than later.

Any information on this topic would be greatly appreciated.

[xxoejyd]

Hi, in your Blazor web assembly app, how to you connect the login button to this Entra external ID ? Many thanks for the video, really usefull!

[hirenrjoshi]

Thank you for the information. How will the home realm discovery be supported on the Entra platform?

[mackie]

What does the road map look like for more advanced authentication mechanisms like FIDO2 based MFA or passkeys etc? Also will this finally support back channel logout of clients too? Also if we wanted to do a true global deployment to support a user base across multiple continents is this something now natively supported?

[staycoolkhan]

Thanks for the video tutorial. One question how to remove "Have an account? Sign In instead" from Sing-Up-Sing-In userflow?

[michaelpropster]

You say "you don't have to worry about CustomPolicies...". Well, there are two things to consider: Even if CustomPolicies are hard to build, it's a neccessary feature since user flows do not nearly provide all the features that one might need. Also, external id still provides different userFlows for signIn, profile, etc. So, how do you call them in your auth request?

[mandarnagarkar]

Is there any customization to login with userid instead of email?

[btastic]

6:45 Looking at this slide, it looks the same as the feature set that Azure B2C already provides. What is the difference? I don't see it

[mrgustavorocha]

The funny think about MS products roadmap and release stages is that they never learn. I can't add Azure AD as Idp in any flow. no matter what. Followed all docs, researched, tried logical stuff, non logical stuff too (pretty much MS line) and nothing. But I cant request support. unless is for billing or subscription management. Well, its in preview. if doesnt work I should just shut up and wait. why would they provide any customer support for a product in preview, right?