.NET Core Step-by-Step Guide: Configuring Azure AD B2C Authentication for a Web App and Web API

Hi Friends,

In this step-by-step guide, you will learn how to configure Azure AD B2C authentication for a web app and web API. Azure AD B2C is a cloud-based identity and access management solution that enables developers to secure their web apps and web APIs with a variety of authentication methods. This tutorial will walk you through the process of setting up Azure AD B2C authentication, including multi-factor authentication and identity management. You will also learn how to integrate Azure AD B2C with your web app and web API, and how to manage user access and authorization. Whether you're a beginner or an experienced developer, this tutorial will provide you with the knowledge and skills you need to secure your web app and web API with Azure AD B2C.

The source code is available at

Please post your questions in the comment section and I will be happy to answer your questions.

Happy coding!

[melissanielsen]

This is by far the best explanation I've found of this after days of searching.

[fermach]

I've been looking for days information too about Azure AD and this is the best video that i've seen, you are good, thanks!

[DotNetCodingGuy]

Thank you for your time and efforts showcasing how easy it is to incorporate B2C into a web app/web api.

[SuperQazwsxedcrf]

Great content mate... god bless you ❤️🙏

[sushilb]

Great video! A quick question, I’m using angular spa and getting invalid_grant error after refresh token is expired (after 24 hours)
How to handle this in SPA. Any insight on this would be very helpful. Thanks in advance

[krishnarajganesan]

Great video! Can you explain how to integrate the MFA with it on a separate screen?

[SathishSilent]

Your efforts are appreciated. In this video, you are using Delegated Permission for WebApi’s Api Permission. Can you give a demo for Application Permission?

[DK-vhkt]

Great video! i was wondering about login via social network accounts is available only in AZURE B2B and not B2C ?

[MortenLundgreen]

Great video! Is the Password Reset feature free to use for all users in Azure B2C or does it require one Azure AD P1 license per user?

[nwbdbqm]

Thanks for sharing this video. How can we integrate this in our application where Admin creates, edit, lists and delete the Users from Azure Ad B2C using Graph.?

[SaiBhanu]

So any user that signups with any of the IDPs, is now in the tenant's AD, correct? For a Web App that uses a transactional database in the backend, would we create the users in the database with Id, Name, Email, Password??

[BelongNowhereIndia]

Thanks, It is very easy to understand, But can you please help how i can manage the code you have give in LINUX device.

[nwoivny]

What if your web api queries an Azure SQL Server database? 1. How do you setup the managed identity for the web api or web app? I think I need to create a global AAD app (not B2C) and assign it permissions to the SQL Server. Then I assign the B2C app service's managed identity to the global AAD app. Is that correct? 2. Do all these services go into the same resource group?

[rlklpoo]

Hi Nice video, one query, in your demo project signout option is not working what we can do inorder to perform signout operation?

[oemzdlq]

Thankyou for this great video . I have one question - I have .NET Web App authentication setup with Azure AD. Now I want to get the token and use that token to pass into another application to populate the user details. Is there a way to do this? Thankyou

[pawankumartiwari]

Thank you for response, actually I am looking for source code for edit profile, sign out etc. I see you have added the links for this Edit profile, sign out which is referring to Account controller . But we don’t have account controller.cs file in repo

[chhayashah]

I am looking for some clean code which does signin, sign up edit profile and reset password using Ad B2C using angular. please help with this

[pawankumartiwari]

This is really great content. I dont see account controller source code in this git hub repo. Could you please share the same?

[simonescarinzi]

You have done a good job. But IMHO there is room for improvement, especially in the woridng, i find repetition of intercalary "okey" a bit frustrating, but probably is just me 😂

[sushilb]

Hi Karthik, You showed blazon client making call to services using ITokenAcquisition and configuring in the startup.

How this would work service to service communication? can you share code sample if you have any? thanks in advance.