@@ -9,7 +9,7 @@ manager: celestedg
9
9
ms.service : active-directory
10
10
ms.workload : identity
11
11
ms.topic : conceptual
12
- ms.date : 02/12 /2020
12
+ ms.date : 03/30 /2020
13
13
ms.author : mimart
14
14
ms.subservice : B2C
15
15
---
@@ -55,85 +55,102 @@ Developers consuming the custom policy feature set should adhere to the followin
55
55
56
56
Custom policy/Identity Experience Framework capabilities are under constant and rapid development. The following table is an index of features and component availability.
57
57
58
- ### Identity Providers, Tokens, Protocols
58
+
59
+ ### Protocols and authorization flows
59
60
60
61
| Feature | Development | Preview | GA | Notes |
61
62
| -------- | :-----------: | :-------: | :--: | ----- |
62
- | IDP-OpenIDConnect | | | X | For example, Google+. |
63
- | IDP-OAUTH2 | | | X | For example, Facebook. |
64
- | IDP-OAUTH1 (twitter) | | X | | For example, Twitter. |
65
- | IDP-OAUTH1 (ex-twitter) | | | | Not supported |
66
- | IDP-SAML | | | X | For example, Salesforce, ADFS. |
67
- | IDP-WSFED | X | | | |
68
- | Relying Party OAUTH1 | | | | Not supported. |
69
- | Relying Party OAUTH2 | | | X | |
70
- | Relying Party OIDC | | | X | |
71
- | Relying Party SAML | | X | | |
72
- | Relying Party WSFED | X | | | |
73
- | REST API with basic and certificate auth | | | X | For example, Azure Logic Apps. |
74
-
75
- ### Component Support
63
+ | [ OAuth2 authorization code] ( authorization-code-flow.md ) | | | X | |
64
+ | OAuth2 authorization code with PKCE | | | X | Mobile applications only |
65
+ | [ OAuth2 implicit flow] ( implicit-flow-single-page-application.md ) | | | X | |
66
+ | [ OAuth2 resource owner password credentials] ( ropc-custom.md ) | | X | | |
67
+ | [ OIDC Connect] ( openid-connect.md ) | | | X | |
68
+ | [ SAML2] ( connect-with-saml-service-providers.md ) | | X | | POST and Redirect bindings. |
69
+ | OAuth1 | | | | Not supported. |
70
+ | WSFED | X | | | |
71
+
72
+ ### Identify providers federation
73
+
74
+ | Feature | Development | Preview | GA | Notes |
75
+ | -------- | :-----------: | :-------: | :--: | ----- |
76
+ | [ OpenID Connect] ( openid-connect-technical-profile.md ) | | | X | For example, Google+. |
77
+ | [ OAuth2] ( oauth2-technical-profile.md ) | | | X | For example, Facebook. |
78
+ | [ OAuth1] ( oauth1-technical-profile.md ) | | X | | For example, Twitter. |
79
+ | [ SAML2] ( saml-technical-profile.md ) | | | X | For example, Salesforce, ADFS. |
80
+ | WSFED| X | | | |
81
+
82
+
83
+ ### REST API integration
84
+
85
+ | Feature | Development | Preview | GA | Notes |
86
+ | -------- | :-----------: | :-------: | :--: | ----- |
87
+ | [ REST API with basic auth] ( secure-rest-api.md#http-basic-authentication ) | | | X | |
88
+ | [ REST API with client certificate auth] ( secure-rest-api.md#https-client-certificate-authentication ) | | | X | |
89
+ | [ REST API with OAuth2 bearer auth] ( secure-rest-api.md#oauth2-bearer-authentication ) | | X | | |
90
+
91
+ ### Component support
76
92
77
93
| Feature | Development | Preview | GA | Notes |
78
94
| ------- | :-----------: | :-------: | :--: | ----- |
79
- | Azure Multi Factor Authentication | | | X | |
80
- | Azure Active Directory as local directory | | | X | |
81
- | Azure Email subsystem for email verification | | | X | |
82
- | Multi-language support| | | X | |
83
- | Predicate Validations | | | X | For example, password complexity. |
84
- | Using third party email service providers | | X | | |
95
+ | [ Phone factor authentication] ( phone-factor-technical-profile.md ) | | | X | |
96
+ | [ Azure MFA authentication] ( multi-factor-auth-technical-profile.md ) | | X | | |
97
+ | [ One-time password] ( one-time-password-technical-profile.md ) | | X | | |
98
+ | [ Azure Active Directory] ( active-directory-technical-profile.md ) as local directory | | | X | |
99
+ | Azure email subsystem for email verification | | | X | |
100
+ | [ Third party email service providers] ( custom-email.md ) | | X | | |
101
+ | [ Multi-language support] ( localization.md ) | | | X | |
102
+ | [ Predicate validations] ( predicates.md ) | | | X | For example, password complexity. |
103
+ | [ Display controls] ( display-controls.md ) | | X | | |
85
104
86
- ### Content Definition
105
+
106
+ ### Page layout versions
87
107
88
108
| Feature | Development | Preview | GA | Notes |
89
109
| ------- | :-----------: | :-------: | :--: | ----- |
90
- | Error page, api.error | | | X | |
91
- | IDP selection page, api.idpselections | | | X | |
92
- | IDP selection for signup, api.idpselections.signup | | | X | |
93
- | Forgot Password, api.localaccountpasswordreset | | | X | |
94
- | Local Account Sign-in, api.localaccountsignin | | | X | |
95
- | Local Account Sign-up, api.localaccountsignup | | | X | |
96
- | MFA page, api.phonefactor | | | X | |
97
- | Self-asserted social account sign-up, api.selfasserted | | | X | |
98
- | Self-asserted profile update, api.selfasserted.profileupdate | | | X | |
99
- | Unified signup or sign-in page, api.signuporsignin, with parameter "disableSignup" | | | X | |
100
- | JavaScript / Page layout | | X | | |
110
+ | [ 2.0.0] ( page-layout.md#200 ) | | X | | |
111
+ | [ 1.2.0] ( page-layout.md#120 ) | | X | | |
112
+ | [ 1.1.0] ( page-layout.md#110 ) | | | X | |
113
+ | [ 1.0.0] ( page-layout.md#100 ) | | | X | |
114
+ | [ JavaScript support] ( javascript-samples.md ) | | X | | |
101
115
102
116
### App-IEF integration
103
117
104
118
| Feature | Development | Preview | GA | Notes |
105
119
| ------- | :-----------: | :-------: | :--: | ----- |
106
- | Query string parameter domain_hint | | | X | Available as claim, can be passed to IDP. |
107
- | Query string parameter login_hint | | | X | Available as claim, can be passed to IDP. |
108
- | Insert JSON into UserJourney via client_assertion | X | | | Will be deprecated. |
109
- | Insert JSON into UserJourney as id_token_hint | | X | | Go-forward approach to pass JSON. |
110
- | Pass IDP TOKEN to the application | | X | | For example, from Facebook to app. |
120
+ | Query string parameter ` domain_hint ` | | | X | Available as claim, can be passed to IDP. |
121
+ | Query string parameter ` login_hint ` | | | X | Available as claim, can be passed to IDP. |
122
+ | Insert JSON into user journey via ` client_assertion ` | X | | | Will be deprecated. |
123
+ | Insert JSON into user journey as ` id_token_hint ` | | X | | Go-forward approach to pass JSON. |
124
+ | [ Pass identity provider token to the application] ( idp-pass-through-custom.md ) | | X | | For example, from Facebook to app. |
111
125
112
126
### Session Management
113
127
114
128
| Feature | Development | Preview | GA | Notes |
115
129
| ------- | :-----------: | :-------: | :--: | ----- |
116
- | SSO Session Provider | | | X | |
117
- | External Login Session Provider | | | X | |
118
- | SAML SSO Session Provider | | | X | |
119
- | Default SSO Session Provider | | | X | |
130
+ | [ Default SSO session provider ] ( custom-policy-reference-sso.md#defaultssosessionprovider ) | | | X | |
131
+ | [ External login session provider ] ( custom-policy-reference-sso.md#externalloginssosessionprovider ) | | | X | |
132
+ | [ SAML SSO session provider ] ( custom-policy-reference-sso.md#samlssosessionprovider ) | | | X | |
133
+
120
134
121
135
### Security
122
136
123
137
| Feature | Development | Preview | GA | Notes |
124
138
| -------- | :-----------: | :-------: | :--: | ----- |
125
139
| Policy Keys- Generate, Manual, Upload | | | X | |
126
140
| Policy Keys- RSA/Cert, Secrets | | | X | |
127
- | Policy upload | | | X | |
141
+
128
142
129
143
### Developer interface
130
144
131
145
| Feature | Development | Preview | GA | Notes |
132
146
| ------- | :-----------: | :-------: | :--: | ----- |
133
147
| Azure Portal-IEF UX | | | X | |
134
- | Application Insights UserJourney Logs | | X | | Used for troubleshooting during development. |
135
- | Application Insights Event Logs (via orchestration steps) | | X | | Used to monitor user flows in production. |
148
+ | Policy upload | | | X | |
149
+ | [ Application Insights user journey logs] ( troubleshoot-with-application-insights.md ) | | X | | Used for troubleshooting during development. |
150
+ | [ Application Insights event logs] ( application-insights-technical-profile.md ) | | X | | Used to monitor user flows in production. |
151
+
136
152
137
153
## Next steps
138
154
139
- Learn more about [ custom policies and the differences with user flows] ( custom-policy-overview.md ) .
155
+ - Check the [ Microsoft Graph operations available for Azure AD B2C] ( microsoft-graph-operations.md )
156
+ - Learn more about [ custom policies and the differences with user flows] ( custom-policy-overview.md ) .
0 commit comments