Skip to content

Commit 0d047ca

Browse files
authored
Merge pull request #295121 from msmimart/patch-2
[Azure AD B2C] In the FAQ, add entry describing bill name change for SMS Phone Authentication to Microsoft Entra External ID
2 parents 5d64cf4 + e0ebe23 commit 0d047ca

File tree

1 file changed

+13
-1
lines changed
  • articles/active-directory-b2c

1 file changed

+13
-1
lines changed

articles/active-directory-b2c/faq.yml

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -163,6 +163,18 @@ sections:
163163
* **Audit reports** include both admin activity and application activity.
164164
* **Usage reports** include the number of users, number of logins, and volume of MFA.
165165
166+
- question: |
167+
Why does my Azure AD B2C bill show phone charges named "Microsoft Entra External ID?"
168+
answer: |
169+
Following the new [billing model](https://azure.microsoft.com/pricing/details/active-directory-b2c/) for Azure AD External Identities SMS Phone Authentication, you may notice a new name on your bill. Previously, Phone MFA was billed as "Azure Active Directory B2C - Basic 1 Multi-Factor Authentication." Now you’ll see the following names based on your [country or region pricing tier](https://aka.ms/B2CSMSCountries):
170+
171+
* Microsoft Entra External ID - Phone Authentication Low Cost 1 Transaction
172+
* Microsoft Entra External ID - Phone Authentication Mid Low Cost 1 Transaction
173+
* Microsoft Entra External ID - Phone Authentication Mid High Cost 1 Transaction
174+
* Microsoft Entra External ID - Phone Authentication High Cost 1 Transaction
175+
176+
Although the new bill mentions Microsoft Entra External ID, **you’re still billed for Azure AD B2C based on your core MAU count**.
177+
166178
- question: |
167179
Can end users use a time-based one-time password (TOTP) with an authenticator app to authenticate to my Azure AD B2C app?
168180
answer: |
@@ -271,7 +283,7 @@ sections:
271283
- question: |
272284
I am using rolling refresh tokens for my application and I am getting an invalid_grant error on redeeming newly acquired refresh tokens well within their set validity period. Why does this happen?
273285
answer: |
274-
While determining validity for rolling refresh tokens, B2C will consider the initial login time of the user in the application also to calculate the token validity skew. If the user haven't logged out of the application for a very long time, this skew value will exceed the validity period of the token and hence for security reasons the tokens will be considered as invalid. Hence the error. Inform the user to perform a proper logout and login back into the application and this should reset the skew. This scenario is not applicable if refresh token rolling is set as infinite rolling.
286+
While determining validity for rolling refresh tokens, B2C will consider the initial login time of the user in the application also to calculate the token validity skew. If the user hasn't logged out of the application for a very long time, this skew value will exceed the validity period of the token and hence for security reasons the tokens will be considered as invalid. Hence the error. Inform the user to perform a proper logout and login back into the application and this should reset the skew. This scenario is not applicable if refresh token rolling is set as infinite rolling.
275287
276288
277289
- question: |

0 commit comments

Comments
 (0)