Last active
July 21, 2024 20:21
-
-
Save rbrayb/d4aa214fae48489ed04cc9970da12384 to your computer and use it in GitHub Desktop.
Differences between Azure AD B2C and Entra External ID for Customers (CIAM)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Feature | B2C | CIAM | |
|---|---|---|---|
| Federation | |||
| Custom OIDC | Yes | No | |
| Entra ID | Yes | Note 1 | |
| Microsoft account | Yes | Note 2 | |
| Social | Lots | Facebook and Google | |
| SAML | Yes - direct | Note 3 | |
| WS-Fed | No | Note 3 | |
| - | - | - | |
| User flows | |||
| Sign in | Yes | Yes | |
| Sign up | Yes | Yes | |
| Reset password (SSPR) | Yes | Yes | |
| Profile edit | Yes | No - Note 4 | |
| Custom policies | Yes | No | |
| Custom authentication extensions | No | Yes | |
| - | - | - | |
| Login with email | |||
| Email and password | Yes | Yes | |
| Email OTP | Yes | Yes | |
| - | - | - | |
| Login with phone | |||
| Phone login | Yes | No | |
| Phone MFA | Yes | No | |
| - | - | - | |
| MFA | |||
| Authenticator | Yes | No | |
| Verifiable credential | Yes | No | |
| - | - | - | |
| Flows | |||
| OIDC | Yes | Yes | |
| Authorization code | Yes | Yes | |
| Auth. flow with PKCE | Yes | Yes | |
| Client credentials | Yes | Yes | |
| Device code flow | No | Yes | |
| ROPC | Yes | No | |
| OBO | No | Yes | |
| Implicit grant | Yes | Yes | |
| - | - | - | |
| Other | |||
| Groups | No - Note 5 | Yes | |
| Dynamic groups | No | Yes | |
| Custom domains | Yes | Yes - Note 6 | |
| Account linking | Yes | No - Note 7 | |
| Extension attributes | Yes | Yes | |
| Native auth | No | Yes - Note 8 | |
| Branding | Yes | Yes - Note 9 | |
| Login with Verifiable credential | Yes | No |
Where are the notes 😬🫣?
In the link above
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
https://medium.com/the-new-control-plane/comparing-azure-ad-b2c-and-entraexternal-id-for-customers-ciam-78a3d7c79fd1