External Identity in Azure AD and B2X user flows
External identities are a new feature in Azure AD. As per that link:
“External Identities is a set of capabilities that enables organizations to secure and manage any external user, including customers and partners. Building on B2B collaboration, External Identities gives you more ways to interact and connect with users outside your organization.”
In the classic case for guest provisioning in Azure AD, you send the person you want to onboard an invite.
External identities achieve the same result but allow the user to self-register. This allows you to capture extra information that you may require about that user.
In Azure AD, under “User settings”, click the external users link.
Enable “Guest self-service sign up”.
Then select “External Identities” in Azure AD.
Then select “Create a user flow”.
I’ve already created one:
Notice that the application name is not “B2B” or “B2C”, it’s “B2X”. More on that later.
Here you can select the identity provider. I’ve used Azure AD but you could add social ones.
I’ve also added some extra user attributes that I want the user to enter:
You can configure page layouts and the languages allowed as well.
I have configured two applications. When the user navigates to either one of these, they will have the option to self-register.
I used the “AppModelv2-WebApp-OpenIDConnect-DotNet” sample from the Microsoft Identity Platform and this is configured in “App registrations” as “UG Demo”.
Clicking “Sign in”:
Click “Create one!” to sign-up.
Enter user in another tenant and then the password.
Now the user can enter the attributes we selected in “User attributes” above. Notice that Azure AD has pre-populated the attributes it knows about i.e. given name (UG) and surname (Demos).
The user then fills in the other details.
and the user then gets to the application.
When a user gets added via the invite you see:
But when they self-register:
If you’ve ever used Azure AD B2C, you’ll see the similarity of the above screens with the B2C sign up / sign in screens.
That’s why when you see these in a B2B flow, Microsoft has decided to call this B2X i.e. a combination of B2B and B2C.
Exactly how far this “merging” will go, we’ll have to wait and see!
The pricing for this feature is here.