Azure Active Directory B2C

174 Pages·2016·2.33 MB·English

TTaabbllee ooff CCoonntteennttss
Overview
Get started
Test drive an Azure AD B2C web app
Test drive an Azure AD B2C desktop app
Test drive an Azure AD B2C single-page app
Create an Azure AD B2C Directory
Register your application
Built-In policies
Mobile & desktop apps
Overview
iOS
Android
.NET
Xamarin
Web apps
Overview
ASP.NET
ASP.NET Core
Node.js
Single page apps
Overview
JavaScript using MSAL
JavaScript using Hello
Web APIs
ASP.NET
ASP.NET Core
Node.js
Call a .NET Web API
Guides
Configure identity providers
Microsoft Account
Facebook
Google
Amazon
LinkedIn
Twitter
Weibo
QQ
WeChat
Set up self-service password reset
Customizing the UI
Helper tool for customization
Use the Azure AD Graph API
Obtain access tokens
Disable email verification
Configure tokens
Enable MFA
Use custom attributes
Customize password
Language customization
Use the reporting API
Migrate users
Identity Experience Framework
Custom policies
Guides
Get started
Configure OIDC/OAUTH providers
Configure SAML providers
Integrate RESTful APIs
User flows
Troubleshooting
Reference
Release notes
SSO session providers
Language customization
Trust Framework definition
Reference
Code samples
Glossary
Types of applications
Authentication protocols
Tokens
Region availability & data residency
Enable billing
Threat management
Issues when creating a directory
Extensions app
Related
Azure Active Directory
Multi-factor authentication
Resources
Azure AD B2C feedback forum
Azure Roadmap
Frequently asked questions
Pricing
Pricing calculator
Service updates
Stack Overflow
Support
Videos
Azure AD B2C: Focus on your app, let us worry
about sign-up and sign-in
1/17/2018 • 2 min to read • Edit Online
Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available
global service that scales to hundreds of millions of identities. Built on an enterprise-grade secure platform, Azure
AD B2C keeps your applications, your business, and your customers protected.
With minimal configuration, Azure AD B2C enables your application to authenticate:
Social Accounts (such as Facebook, Google, LinkedIn, and more)
Enterprise Accounts (using open standard protocols, OpenID Connect or SAML)
Local Accounts (email address and password, or username and password)
Get started

First, get your own tenant by using the steps outlined in Create an Azure AD B2C tenant.
Then choose your application development scenario:
Overview .NET
iOS Xamarin
Android
Mobile & Desktop Apps
Overview Node.js
ASP.NET
ASP.NET Core
Web Apps
Overview
JavaScript
Single Page Apps
ASP.NET Call a .NET Web API
ASP.NET Core
Node.js
Web APIs
What's new
Check back here often to learn about future changes to the Azure Active Directory B2C. We also tweet about any
updates by using @AzureAD.
In addition to "Built-in Policies" (General Availability), the "Custom Policies" feature is now available in public
preview. Custom policies are for identity pros that need control over the composition of their identity
experience.
The Access Token feature is now available in public preview.
General Availability of Europe-based Azure AD B2C directories has been announced.
Check out our growing library of code samples on Github!
How-to articles
Learn how to use specific Azure Active Directory B2C features:
Configure Facebook, Google+, Microsoft account, Amazon, and LinkedIn accounts for use in your consumer-
facing applications.
Use custom attributes to collect information about your consumers.
Enable Azure Multi-Factor Authentication in your consumer-facing applications.
Set up self-service password reset for your consumers.
Customize the look and feel of sign-up, sign in, and other consumer-facing pages that are served by Azure
Active Directory B2C.
Use the Azure Active Directory Graph API to programmatically create, read, update, and delete consumers in
your Azure Active Directory B2C tenant.
Next steps
These links are useful for exploring the service in depth:
See the Azure Active Directory B2C pricing information.
Review our code samples for Azure Active Directory B2C.
Get help on Stack Overflow by using the azure-ad-b2c tag.
Give us your thoughts by using User Voice, we want to hear them!
Review the Azure AD B2C Protocol Reference.
Review the Azure AD B2C Token Reference.
Read the Azure Active Directory B2C FAQs.
File support requests for Azure Active Directory B2C.
Get security updates for our products
We encourage you to get notifications of when security incidents occur by visiting this page and subscribing to
Security Advisory Alerts.
Test drive an Azure AD B2C enabled web app
12/11/2017 • 3 min to read • Edit Online
Azure Active Directory B2C provides cloud identity management to keep your application, business, and customers
protected. This quickstart uses a sample to-do list app to demonstrate:
Sign-in with a custom login page.
Sign-in using a social identity provider.
Creating and managing your Azure AD B2C account and user profile.
Calling a web API secured by Azure AD B2C.
Prerequisites
Visual Studio 2017 with the ASP.NET and web development workload.
A social account from either Facebook, Google, Microsoft, or Twitter.
If you don't have an Azure subscription, create a free account before you begin.
Download the sample
Download or clone the sample application from GitHub.
Run the app in Visual Studio
In the sample application project folder, open the solution in Visual Studio.
B2C-WebAPI-DotNet.sln
The solution is a sample to-do list application consisting of two projects:
TaskWebApp – An ASP.NET MVC web application where a user can manage their to-do list items.
TaskService – An ASP.NET Web API backend that manages operations performed on a user's To-do list items.
The web app calls this web API and displays the results.
For this quickstart, you need to run both the and projects at the same time.
TaskWebApp TaskService
1. In the Visual Studio menu, select Projects > Set StartUp Projects....
2. Select Multiple startup projects radio button.
3. Change the Action for both projects to Start. Click OK.
Select Debug > Start Debugging to build and run both applications. Each application opens in its own browser
tab:
- This page is the ASP.NET web application. You interact directly with this application in
https://localhost:44316/
the quickstart. - This page is the web API that is called by the ASP.NET web application.
https://localhost:44332/
Create an account
Click the Sign up / Sign in link in the ASP.NET web application to start the Sign Up or Sign In workflow. When
creating an account, you can use an existing social identity provider account or an email account. For this quickstart,
use a social identity provider account from either Facebook, Google, Microsoft, or Twitter.
SSiiggnn uupp uussiinngg aa ssoocciiaall iiddeennttiittyy pprroovviiddeerr
To sign up using a social identity provider, click the button of the identity provider you want to use.
You need to authenticate (sign-in) using your social account credentials and authorize the application to read
information from your social account. By granting access, the application can retrieve profile information from the
social account such as your name and city.
Finish the sign-in process for the identity provider. For example, if you chose Twitter, enter your Twitter credentials
and click Sign in.
Your new Azure AD B2C account profile details are pre-populated with information from your social account.
Update the Display Name, Job Title, and City fields and click Continue. The values you enter are used for your
Azure AD B2C user account profile.
You have successfully:
Authenticated using an identity provider.
Created an Azure AD B2C user account.
Edit your profile
Azure Active Directory B2C provides functionality to allow users to update their profiles. In the web application
menu bar, click your profile name and select Edit profile to edit the profile you created.