Azure Active Directory B2C (AAD B2C) for beginners

[@06silverfire]

Better than Microsoft’s videos on b2c!

[@real-codingfreaks]

06silverfire thank you!!!

[@saadmalaeb8372]

Exactly! Microsoft trainers feel like robots. It's like listening to the documentation.

[@davesav34]

Great tutorial. Much clearer than any of the Microsoft videos and documentation on the same subject. Looking forward to viewing more in the series.

[@SatyanarayanaMutyala]

This is a great context on AAD B2C, I am searching for similar content for a week and glad was able to find this. Thank you Alex!

[@rxn713]

Thank you, Alexander, for the excellent explanation. Applause for German quality once again!

[@poonchezhians]

Alex,really apperciate your explanations and the way of presenting. Thanks for sharing this :)

[@pratiktelaviya4312]

Really helpfull for beginners..I checked many resources on internet but this one seems best for me to start with..Thank you so much for your efforts Alexander.

[@dorinbaba2182]

Great start for me into Azure Identity world :) Thank you!

[@savasakgol9107]

Thanks for sharing Alex, this is basically everything one needs to know about B2C!

[@proflanky]

Great Job Alex. I wanted to do a demo for a few of my friends and this kinda gave a good beginner's guide. It made a my job simpler.

[@real-codingfreaks]

Noah James glad to hear it helped :)

[@multicolorvideo]

Amazing, I succesfully configured Azure and App. Thank you very much!

[@eric170B]

Excelente tutorial. You are right, most tutorial are skipping stuff. This one was very useful, thanks!

[@poloska9471]

Hey Alex, I just wanted to let you know that A. I enjoyed your tutorial, it was great! and B. [Edited to remove some info]

[@real-codingfreaks]

Thx! Yea I know. This did not work in my old post production tool. Anyway its not that an sec issue. But thx.

[@ernestmfakudze]

Thanks Alex. Very useful for beginners like me.

[@cassfayn5826]

Can you please give me a hand please I am getting AADB2C90108: The orchestration step '1' does not specify a CpimIssuerTechnicalProfileReferenceId when one was expected Pomogi poshalusta!

[@SS-cz9jz]

Thank you Alex. You saved my time!!!!

[@alirezakhorram9962]

Danke dir Alexander, Es war sehr einfach erklärt!

[@apigee3697]

Great job! Alex! Thank you so much for the great video! Very easy to understand. This will make my learning much easier!

[@XaviCasals]

A very good tutorial. Thanks!

[@phanirajb3709]

Wonderful tutorial on B2C Authentication

[@deepaks2507]

Awesome explanation.Thank you.

[@user-lw4qk9gg7x]

saved my whole day from reading documentation..thanks Alex, good one

[@byuidan]

What a fantastic video! Thank you so much for your effort on this.

[@techno-max]

Very informative and exactly what I was looking for. Thanks Alex

[@nihalsingh2318]

Absolutely loved it.

[@sandeshraoyou]

Very simple explanation . Nice video .Thanks

[@MSDTrinity]

Thanks Alex - this was great. Very helpful.

[@philipp-christopherdeeke2210]

Nice work Alex, this might come in handy soon!

[@real-codingfreaks]

Thanks! I hope so :-)

[@andreasfinke1801]

Thanks for the effort. Very good guide.

[@ambujaable]

Superb ! Big Help, Thanks Alex

[@shuchitatripathi4067]

Very nicely explained

[@herbramos3985]

As several commenters have posted, this video is much more informative than much of what MS has put out. Great video which clarifies some of the ambiguity. AD B2C should be as simple as Firebase, but it is not. Thanks for this video.

[@gagwithgaffer8385]

Excellent overview thanks

[@isax55]

Best tutorial ever!!

[@孔令星-y8c]

very good,thank you.

[@adamnowak6032]

Very good video. Thank you Alex.

[@rock_0075]

Thanks for the video, I am looking bring the Azure AD to my app (react+ springBoot) , but not sure what will be best suited for me (Azure Ad B2C, Azure ad B2B etc), as my app has the functionality to register new user (name, email address(any domain email address) and password) and login. advise or pointer on this please?

[@snehkataria4490]

Hello, We need to check this Implicit grant permission for Azure Ad B2C Login ?

[@yashizuko]

I like this approach of “real use” instead of general docs that refer to other docs infinitelly, much better way to share knowledge in my opinion, more kb per hour to brain 😂 one question i have is: how to do the steps at 26:41 in visual studio 2019?

[@AndreiBazanov]

Very good! Many thanks! Alex, do you have a sequal which shows how to communicate with an API from the Web App? I am trying to add a Web API application which receives access_token with read write scopes for the given user. Thanks.

[@real-codingfreaks]

Hi Andrei! I will bring up one. I think I need like 2-3 weeks because currently I'm moving my place.

[@kacper1351]

Awesome tutoral, thanks a lot

[@michaelviglianco6121]

Thanks. I've been looking for a comprehensive "story" about how to conceptualize this for a while. The MS Documentation pages and jargon don't seem to convey whats going on to me as I think more mechanically and conceptually vs jargon.

[@kishoreb1912]

Great tutorial Alex

[@real-codingfreaks]

Kishore B thx

[@saddamhossaindotnet]

Just Amazing. I like it.

[@adityagupta3969]

@Alexander Schmidt which version of visual studio you are using

[@real-codingfreaks]

2022 Enterprise

[@EdgarKnapp]

Thanks for the tutorial. Do you have an updated version? There is very little in the current versions of libraries, IDE, Azure Portal that resembles the screens you show. Especially hooking up authentication in a .NET Core Web App is completely different.

[@real-codingfreaks]

I will do an updated cast soon. Expect this in the next 2 weeks.

[@snehkataria4490]

Hello, How we can get the access token with response_type id_token ?

[@fabiancodau9068]

Why did you choose that port? I receive an error when I'm trying to start the application from the visual studio and it says "Unable to connect to web server 'IIS Express' ". Do you have any idea how can I solve it?

[@real-codingfreaks]

You are free to switch your port. You have to take care that the port configured in your launchSettings matches the one configured in your callback URL.

[@juanidamato]

Great video, Thanks

[@andrewketley1276]

Brilliant, just right - thanks :)

[@real-codingfreaks]

Andrew Ketley thank you sir!

[@pankajmandania1785]

Really good job in explaining in such a great detail. as @06silverfire said "better than microsoft videos"

[@real-codingfreaks]

Thank you!

[@veronicamoreo875]

It's really good. Got a few questions: 1) How can you use the users in new tenant inside the default tenant directory? Also, what if the app is also registered inside default tenant directory? 2) With your VS code, can you get JWT out of the box or would we need to add extension methods for Azure authentication first? Thanks

[@real-codingfreaks]

Hi Veronica! I'm not sure if I get everything right here. 1) The users registered in the AAD B2C have nothing to do with the AAD. This is why you choose B2C in the first place. You don't want to mess up your AAD tenant with external users. You should not register your App in the AAD tenant. 2) You can retrieve the token itself easily when you implement your own OpenId-Middleware. If you do this you have to configure AAD B2C login differently but then you get events which allow you to extract the token. I didn't show this because it would break my architecture pattern which basically targets simplicity here.

[@veronicamoreo875]

@@real-codingfreaks Thanks for the prompt reply. So basically, every tenant is going to be managed independently. In terms of Roles and Groups, can they be shared across multi tenants so that the application doesn't have to cater to different ones from every tenant?

[@OvRaf]

what's the best scenario to go with B2C and what's the best scenario to go with ADFS?

[@real-codingfreaks]

Federation is completely different because you connect orgs directly. B2C leaves this open. Although you could achieve a similar result it is focussed on apps and self-service users. In short: B2C puts apps, devs and users in control where ADFS is more governed

[@OvRaf]

@@real-codingfreaks thanks for explanation

[@nbr1984]

Grt Tutorial , Thanks

[@RazorTalon442]

Great video!

[@wildlif3_luv]

Thank you for this amazing video Alex. Great start for a beginner like me. I have a question associated with the same, in the existing code only the display name is being read , Is there any way I can read values like email, job title, etc.?

[@real-codingfreaks]

Any information that is not part of the claims in the token (ClaimsIdentity) can be taken from Azure Graph for instance. There are ways to customize the claims information provided by AzureAD too.

[@johndodds7949]

Is this like AWS Cognito?

[@real-codingfreaks]

I don't know Cognito good enough to answer this but I already heard about certain features available on both sides.

[@nasarazam]

I hear the word "Tenant" everywhere but still cannot grasp what exactly it is. Any suggestions where I can find an easy explanation for that? Thanks

[@real-codingfreaks]

Tenant here is mostly equivalent to Azure Active Directory.

[@nasarazam]

@@real-codingfreaks Thanks !

[@TheOnlyDominik]

Lustig, das man die "geheimen" Daten alle sieht und dann wird erst der Weichzeichner aktiv.

[@real-codingfreaks]

Ja ich weiss. :) hab die extension auch nicht mehr aktiv

[@deynerfranciscolezcano5586]

Hi, please I need help with deploying this app to a b2c tenant. Somehow I can not make it work. I was able to do everything you did on my localhost, and it works fine, but when I create an app on the tenant, and I deploy the code, I get a page error with little information : An error occurred while processing your request

[@real-codingfreaks]

Deyner Francisco Lezcano sorry but this is to vague to answer. One hint: you don‘t deploy anything to the B2C tenant. You alwasy deploy to your original tenant. Watch the video carefully when I deploy!

[@deynerfranciscolezcano5586]

@@real-codingfreaks thanks man for answering my question. So, I can not create a web application within b2c? In fact, I tried doing that, but I get the error I mentioned. I posted some details of my issue on stackoverflow (stackoverflow.com/questions/58741393/how-to-deploy-a-asp-net-core-web-application-to-azure-b2c-tenant) I would really appreciate if you can take a look. So, what I did was to create a web app within the B2C tenant and deployed my code there. The only difference from your video, is that on the b2c application, on reply urls section, instead of using localhost:44390/signin-oidc, I used mywebappname.onmicrosoft.com/signin-oidc; but still does not work =/ . Also it would be great if you can do a video about this , I believe I am not the only one having this problem

[@meetgirishmjn]

Thanks Alexander

[@maximss]

How to add login with multiple organizations? Imagine a SaaS where clients can login automatically via their tenant. What method should I use? Thanks =)

[@real-codingfreaks]

Hi. This would only require one Open ID provider per wanzent organization. In my videos I showed how to do this with AAD.

[@ServerOutSourcer]

Awesome Thanks!!

[@georgezviadgoglodze7810]

Good job!

[@nasarazam]

This is an excellent tutorial - Thanks !!! How difficult is it to extract user information that is gathered in Azure? For example, I would like to use the user information other application and need to store user information in SQL Server.

[@RenegadeVile]

You should be able to mark what user attributes you want to get as a claim in your token. Then you can take them from the token (that's why the application knows what the user's given name, last name, etc. is.

[@RenegadeVile]

You should be able to mark what user attributes you want to get as a claim in your token. Then you can take them from the token (that's why the application knows what the user's given name, last name, etc. is.

[@guilhermesilva9741]

Nice job! vielen dank!

[@real-codingfreaks]

Thanks! Especially for the German greet :-)

[@anita2637]

Hello We need same think done in PHP please provide how we can connect authenticate using PHP

[@real-codingfreaks]

Anitaben Parsottambhai Makwana github.com/Azure-Samples/active-directory-b2c-php-webapp-openidconnect

[@Kuvaldis1983]

Great! Thanks!!!

[@prasanna3215]

Thanks..

[@oluteju6308]

Hi Alex, do you do one on one training? I love this video, is simple but kind of complex because i dont know much about visual studio.

[@real-codingfreaks]

Yes. I'm an Azure Consultant by profession. Sorry that I'm pretty focussed on VS but you could switch the dev-Environment to lets say VS Code without any problem.

[@TheManish2013]

helpful video

[@bemerson07]

This video really helped and we got our Azure Function working with this. Our client that needs to consume our API is calling from a Java service and doesn't want any manual intervention when needing to login. Is there a method to validate credentials and get the access token programmatically like this? It's been hard finding anything online on how to consume our API from Java.

[@real-codingfreaks]

Brandon Emerson inhear this request a lot. I‘m not surenif this is supported because B2c relies on the policies and thus needs a matching UI. There are several other restrictions like missing implicit flow with native client. I got a hint to use Spring Boot in Java for this.

[@real-codingfreaks]

Not sure if this is still valueable for you but maybe this doc-link gives you some hints: docs.microsoft.com/en-us/azure/active-directory-b2c/signin-appauth-android?tabs=app-reg-ga, It's on Android but should be pretty close to your problem.

[@get_ready]

Can Azure AD B2C also take care of Authorization (not just Authentication)? Thanks for your work btw!

[@real-codingfreaks]

Not really. In distinction to AzureAD for instance it is currently not possible to add group-memberships to the claims which is what a lot of people use to distinguish roles. We are using GraphAPI to perform those steps after the authentication.

[@get_ready]

@@real-codingfreaks Interesting.. I will have a look at it. Thanks.

[@WahidBitar]

Thanks a lot

[@sachinsaste5198]

I want to customize the UI (HTML & CSS) of sign in and sign up page (default templates, eg. ocean_blue template), need tutorial on same, if you provider any reference related to that, it will helpful

[@real-codingfreaks]

Customization is planned for another part. I'm currently too busy to produce it but I will try it in the next 3-4 weeks.

[@mohamadalibrahim2995]

vielen dank Alex

[@sehmussincar3368]

Can you show how to configure Google?

[@mohamadalibrahim2995]

10:49 / i can see all thing. fix it

[@Andris1991HUN]

still not fixed :(

[@zolty96]

start doing pluralsight on this topic :). Dou you have movei with e.g react and Rest API (implicit flow)

[@real-codingfreaks]

I'll overthink this :-). My main problem is time and I'm afraid that Pluralsight will boost my effert. Currently I already need like 2 hours of production time for every hour of result-video.

[@amonmcranny2654]

I have been watching this for five minutes now, and I am still waiting to find out what the fuck B2C means

[@real-codingfreaks]

B2C is the standard acromyme for business to customer.

[@jitrammaharjan2025]

Microsoft should pay to you sir for this video haha

[@Randyminder]

Hi Alexander - Great video. I have a question. You created a B2C domain name of codingfreaks.onmicrosoft.com. What is the purpose of this domain name? What is is used for?

[@real-codingfreaks]

Sorry for the late response. This is just a tenant name I choose. You have to create a new domain/tenant in order to use B2C. ".onmicrosoft.com" is the suffix you always get from Azure. In B2C (other than in default AAD) you could not create a custom domain.

[@vincemcwut9495]

use 10 minutes mail for demo emails

[@sehmussincar3368]

Did you get my last comment?

[@janesbeets8]

Are you teaching B2C or Coding101? You fly through the B2C illustrations but then you spend such a lot of time in the Visio coding interface???WTF? And who the hell is this "HE" you keep referring to?

[@real-codingfreaks]

Hi Janes! I'm trying to do both because B2B is not conceivable without coding and former casts of mine where criticized for jumping over some points. It's hard to satisfy all of the viewers. I don't prep my videos like for instance people do on pluralsight so I can understand the complain of some wrong weightings in terms of time spent. I don't know what you mean with "HE" (can you give me a time frame maybe) but maybe this confusion comes out of the fact that my home-language is German and sometimes I mix it up a little bit.

[@DanielMlodecki]

@@real-codingfreaks Janes Beets is referring to the way you say "he" instead of "it" when referencing, for example, the Azure web interface. This is a very common misstep for people coming to english from other languages and does not affect the (excellent) quality of this video. Janes Beets is being a pedantic turd and he should go sit in the corner for a few minutes and think about trying to be polite to people who are helping us all learn something new for free. Also, Janes Beets has mixed up Visio (used for making flowcharts) and Visual Studio (used for making programs like Visio), which of course are two completely different Microsoft products. A lesser person than you or I could find some amusement in someone making such a comically inept mistake in a shitpost calling out someone else's trivial error.

[@poloska9471]

Don't worry about the dickheads Alexander, there will always be dissatisfied buttholes out there and they go through life all entitled and end up in ruin because of their attitude eventually. Your tutorial is great and it was very informative for me.

[@calogerasinatra1559]

Mi serve numero contatto della ditta . easy.b2c

[@aashutoshkushawaha3194]

Great tutorial. Much clearer than any of the Microsoft videos and documentation on the same subject. Looking forward to viewing more in the series.

[@satyenkasturi]

Excellent explanation. Thanks

[@quiettime1282]

very clear and informative, thank you.