Azure AD B2C (Web App Integration)

Azure Active Directory B2C (Azure AD B2C) is an identity management service that enables custom control of how your customers sign up, sign in, and manage their profiles when using your iOS, Android, .NET, single-page (SPA), and other applications.

Learn how to use Azure AD B2C with Web App,

Create B2C Tenant

1. First of all, open subscription
2.  Select your subscription
3. Click on Resource Providers
4. Register Microsoft.AzureActiveDirectory
5. Go to your Active Directory
6. Click on create a tenant
7. Select Azure Active Directory (B2C)
8. Enter organization name, domain name, resource group
9. Click on review and create

In Azure AD B2C, Create New App Registration

1. Enter name (AppTesting)
2. Select account type=Accounts in any identity provider or organizational directory (for authenticating users with user flows)
3. Grant admin Consent
4. Click on register
5. Click on your app (AppTesting)
6. Overview (Here are Application (client) ID, Directory (tenant) ID)
7. Authentication (Web->Redirect URIs = https://jwt.ms, Enable Access and ID Tokens and save it)

In Azure AD B2C, Identity Providers

1. Click on any identity provider like google
2. Enter Name for identity=Google
3. Enter Client ID = From Google Api and Services (https://console.cloud.google.com/apis/credentials)
4. Enter Client Secret = From Google Api and Services (https://console.cloud.google.com/apis/credentials)
5. Click Save

In Azure AD B2C, Policies -> User flows

1. Create user flow
2. Click on user flow which you want like sign up and sign in, profile editing, reset password
3. Click Recommended Version
4. Click on Create
5. Enter unique name for user flow B2C_1_* (susi)
6. Select local account and social identity providers
7. Select user attributes and token claims (Data required from user on signup)
8. Click on create

In Azure AD B2C, Policies -> User flows

1. Click on user flow which you created (B2C_1_susi)
2. Click on Run user flow
3. Select your application
4. Select your reply URL
5. Click on run user flow or copy the URI and paste it in browser
6. Login page open and all the user attributes showing on signup and after adding data on each field click on create
7. User redirect to https://jwt.ms which shows access token of user

In Azure AD B2C, Users

1. All users are listing here through our sign up user flow
2. Activity -> Sign-ins (each user sign in activity report)

Open Microsoft Visual Studio

1. Create new project (Asp.net core web application)
2. Enter project name
3. Click on create
4. Select Web Application (Model-View-Controller)
5. Click on authentication change
6. Select Individual User Accounts
7. Select “connect to an existing user store in the cloud” from dropdown menu
8. Enter Domain Name = Directory (tenant) ID (App register in AD B2C -> Overview)
9. Enter Application ID = Application (client) ID (App register in AD B2C -> Overview)
10. Copy Callback path and paste it in Azure AD B2C -> Select your App in app Registration -> Authentication -> Web->Redirect URIs = “https://localhost:44391/signin-oidc” and save it
11. Paste your sign up and sign in user flow name in “Sign-up or Sign-in Policy” = B2C_1_susi
12. Paste your reset password user flow name in “Reset password Policy” = B2C_1_reset
13. Click on ok
14. Click on create
15. Run the project
16. Sample project open in web you can sign up and sign in by clicking on Sign in button
17. After successfully sign up/sign in, user can see his name in the web project
18. In Azure AD B2C -> Users, All users are listing here through our sign up user flow

References:

GitHub - azure-ad-b2c/samples: Azure AD B2C custom policy solutions and samples.

Solutions and Training for Azure Active Directory B2C