MS Entra External and how to select OpenID Connect protocol

Zoran Milanovic 20

Hello,
based on MS suggestion our project team decided to us not B2C but MS Entra External ID .
However how to select OpenID Connect protocol which seems to be supported in MSEE?
Only there is option for SAML or WS Fed

Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2024-08-16T20:31:33.6466667+00:00

Hi @Zoran Milanovic ,

Just following up since we were able to connect offline about the workaround option. If the information helped you, please don't forget to accept the answer. This will help me and improve the community search. Otherwise let me know if you have further questions.

1 answer

Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2024-08-14T00:29:48.7966667+00:00

Hi @Zoran Milanovic ,

Adding a federated OIDC identity provider is currently only supported in in Azure AD B2C tenant, which supports allowing sign in via external federated OIDC IDP identities. (See Creating Azure AD B2C tenant and Add OIDC Identity Provider to B2C tenant \ user flow) .

In an Entra Workforce tenant, under External Identities you can invite B2B guest users via SAML\WS-Fed Federation feature, where OIDC is not supported.

If you are planning to invite external users to an Entra Workforce tenant and those external users have an OIDC IDP you should use B2B Guest Invitations ( Add a guest user and send an invitation )

That said, if you need to add Entra External ID Custom OIDC external identity provider support, there is a workaround option that I will send to you in a private message.

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.
Please sign in to rate this answer.
Zoran Milanovic 20 Reputation points

2024-08-14T02:21:31.1866667+00:00

Thank you Marilee for this answer but we do need to know how add Entra External ID Custom OIDC external identity provider support;

So please send me a workaround option in a private message.

Manuel T 151 Reputation points

2024-08-14T14:06:12.82+00:00

We're facing the same issue. Neither SAML, nor OIDC are possible by default in Entra External ID.

@Marilee Turscak-MSFT , do you mind sending me the workaround as well?Thank you very much.

Manuel T 151 Reputation points

2024-08-14T14:07:38+00:00

We're facing the same issue. Neither SAML, nor OIDC are possible by default in Entra External ID.

@Marilee Turscak-MSFT , do you mind sending me the workaround as well?Thank you so much.

Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2024-08-14T21:54:31.1666667+00:00

Hi Zoran, I did send you a private message. As I mentioned it is not supported under External Identities and you either have to use guest invitations or use the workaround I shared.

André Gresmo Johansen 10 Reputation points

2024-09-05T11:59:11.4633333+00:00

we are facing the same issue, and are in need of OIDC as Idp. Could you share the workaround with me as well?

EDIT: Actually, I think it should be publicly shared, as this seems to be something a bunch of people are struggling with.

Leon Geldenhuys 0 Reputation points

2024-09-26T21:37:10.6833333+00:00

@Marilee Turscak-MSFT , do you mind sending me the workaround as well?

Thank you very much.

metalheart 366 Reputation points

2024-09-28T06:15:32.88+00:00

@Marilee Turscak-MSFT I'm signing up for the workaround as well
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

MS Entra External and how to select OpenID Connect protocol

1 answer

Your answer