Register SPA application in Azure AD B2C

Question

question

robcool asked Apr 26, '22 robcool commented Jun 17, '22

Register SPA application in Azure AD B2C

Hi There,
I have an App registration in my Azure AD tenant that has redirect URIs configured using single page application (SPA).

Please let me know the steps involved in migrating this application to Azure B2C. As part of this migration, I would also need to establish openID connect provider with my corporate AzureAD for user sign-in.

Thanks.

azure-ad-b2c

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

sikumars · May 12 at 04:52 AM

@robcool,
I'd want to check in and see if you had any other questions or if you were able to resolve this issue? If you have any other questions, please let us know. Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 ·

robcool sikumars · Jun 17 at 01:05 AM

Hi @sikumars-msft I need to add app roles (via manifest) and assign these roles to users (authenticated via external AAD) via groups.
Request you to please confirm how the user role assignment (for external IDP) can be managed via B2C groups ?

Thanks.

0 ·

Answer 1 · 2022-04-29T17:30:11.397Z

sikumars answered Apr 29, '22

Hello @robcool,

Thanks for reaching out.

Azure Active Directory B2C (Azure AD B2C) supports authentication for various modern application architectures. All of them are based on the industry standard protocols OAuth 2.0 or OpenID Connect. This article describes the types of applications that you can build, independent of the language or platform you prefer. It also helps you understand the high-level scenarios before you start building/migrate applications.

Every application that uses Azure AD B2C must be registered in your Azure AD B2C tenant, same as how we register in regular Azure AD. In addition, you must setup user flow to define users action (such as Sign-in, Sign-up, Passwordreset and Sign-out flow etc..,) using default or custom policy.

Therefore, the following guidance which talks about how to configure and enable authentication in a sample single-page application by using Azure AD B2C and similar approach can be leveraged to switch an existing application to B2c. Hope this helps.

https://docs.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-sample-spa-app
https://docs.microsoft.com/en-us/azure/active-directory-b2c/enable-authentication-spa-app
https://docs.microsoft.com/en-us/azure/active-directory-b2c/enable-authentication-spa-app-options

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question