The new control plane

A customer asked me if adding Entra ID security to a legacy Java desktop application currently without authentication was possible.

I posted on the reverse situation here.

You sometimes need to clear a claim in the claims bag while using custom policies.

I got the idea from this post.

Note that this post is around a PoC, so use it at your own risk!

I have set up a user with email/password and I use conditional access to set up MFA for the user.

A client asked me about Kinde and whether it could be federated with B2C.

Entra External ID is the “successor” to Azure AD B2C, and there are many similarities, but there are slight differences in how things are…

I needed to do some development and get OTP codes from B2C via email. I wanted something as simple as possible.

I was configuring an Enterprise application and adding some claims under the SSO tab:

The 6-digit number generated by authenticator apps, such as Microsoft Authenticator or Google Authenticator, is based on the Time-based…

I’ve previously posted about getting attributes via this utility and via PowerShell.

Read this post first.

This is a utility post, as I will post more about extension attributes, but it can live on its own.

Entra External ID is also called CIAM.

The use case is “showcasing identifying yourself at a help desk by presenting your VerifiedEmployee card.

There’s a useful cmdlet here.

I see a number of questions around this over on stackoverflow.

I’ve answered a few questions lately about this over on stackoverflow.

First, read this post, as it covers a lot of the basics.

Whenever new B2C users ask me whether to start with custom policies or user flows, I always tell them to start with custom policies.

I was trying to set up the Identity provider in B2C and got this message:

I’ve written several “Connecting” posts over the years describing how to connect one IDP to another.

This is a question that has popped up on stackoverflow a number of times recently.