Azure AD B2C SSO across applications

Niksworld 1 Reputation point
2020-08-12T17:35:10.567+00:00

Hi There,

We are at the verge of deciding if we need a single unified B2C instance or multiple for our multiple applications leveraging B2C. Need advice on the below as it will be a deciding factor to go either way (single or multiple) B2C directory.

Scenario:

Two applications, app1 & app 2.
Both applications will be using same IDP's- local account & MSA.
Both app1 & 2 will be using separate app registrations, built-in or custom user flows for different branding and sign-in experience.

Requirement:

User1 is registered for app1, user2 is registered for app2. User1 should not be able to login to app2 and vice versa for user2.

I know in this scenario, since we are using same B2C and same identity providers for both the apps / user flows, there will be SSO out of the box. Is there a way we can control the SSO not to happen in between multiple applications within same B2C?

Thank you!

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,843 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,456 Reputation points
    2020-08-12T18:49:09.41+00:00

    In order to avoid limiting users to specific applications you can leverage Custom Policies in tandem with features such as Restrictions (for local accounts) so that only specific issuerUserId values are allowed to be input or used (EG: users from selected domains trough a regular expression) or claims transformations such as SetClaimsIfRegexMatch and AssertBooleanClaimIsEqualToValue to output the result of matching the issuerUserId with the same regular expression used before and raise an error according to the result.

    SSO sessions can be scoped to application, policy or even disabled.

    0 comments
  2. James Hamil 24,311 Reputation points Microsoft Employee
    2020-08-31T19:11:27.823+00:00

    Hi, are there any updates with this case? If not, please select the appropriate response as "Answered." Otherwise please let us know how we can assist you.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.