You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/overview.md
+19-13Lines changed: 19 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,18 +8,23 @@ manager: celestedg
8
8
ms.service: active-directory
9
9
ms.workload: identity
10
10
ms.topic: overview
11
-
ms.date: 09/19/2019
11
+
ms.date: 10/01/2021
12
12
ms.author: mimart
13
13
ms.subservice: B2C
14
14
---
15
15
16
16
# What is Azure Active Directory B2C?
17
17
18
-
Azure Active Directory B2C provides business-to-customer identity as a service. Your customers use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs.
18
+
Azure Active Directory Business-to-consumer (Azure AD B2C) provides business-to-customer identity as a service. Your customers use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs.
19
19
20
20

21
21
22
-
Azure Active Directory B2C (Azure AD B2C) is a customer identity access management (CIAM) solution capable of supporting millions of users and billions of authentications per day. It takes care of the scaling and safety of the authentication platform, monitoring and automatically handling threats like denial-of-service, password spray, or brute force attacks.
22
+
Azure AD B2C is a customer identity access management (CIAM) solution capable of supporting millions of users and billions of authentications per day. It takes care of the scaling and safety of the authentication platform, monitoring, and automatically handling threats like denial-of-service, password spray, or brute force attacks.
23
+
24
+
Azure AD B2C is a separate service from [Azure Active Directory (Azure AD)](../active-directory/fundamentals/active-directory-whatis.md). It is built on the same technology as Azure AD but for a different purpose - to allow businesses build customer facing application and then allow anyone to sign up into those applications with no restrictions on user account.
25
+
26
+
## Who uses Azure AD B2C?
27
+
Any business or individual who wishes to allow anyone to sign up to their web/mobile applications.
23
28
24
29
## Custom-branded identity solution
25
30
@@ -31,35 +36,36 @@ Customize every page displayed by Azure AD B2C when your users sign up, sign in,
31
36
32
37
## Single sign-on access with a user-provided identity
33
38
34
-
Azure AD B2C uses standards-based authentication protocols including OpenID Connect, OAuth 2.0, and SAML. It integrates with most modern applications and commercial off-the-shelf software.
39
+
Azure AD B2C uses standards-based authentication protocols including OpenID Connect, OAuth 2.0, and Security Assertion Markup Language (SAML). It integrates with most modern applications and commercial off-the-shelf software.
35
40
36
-

41
+
:::image type="content" source="./media/overview/scenario-singlesignon.png" alt-text="Diagram of third-party identities federating to Azure AD B2C.":::
37
42
38
43
By serving as the central authentication authority for your web applications, mobile apps, and APIs, Azure AD B2C enables you to build a single sign-on (SSO) solution for them all. Centralize the collection of user profile and preference information, and capture detailed analytics about sign-in behavior and sign-up conversion.
39
44
40
45
## Integrate with external user stores
41
46
42
47
Azure AD B2C provides a directory that can hold 100 custom attributes per user. However, you can also integrate with external systems. For example, use Azure AD B2C for authentication, but delegate to an external customer relationship management (CRM) or customer loyalty database as the source of truth for customer data.
43
48
44
-
Another external user store scenario is to have Azure AD B2C handle the authentication for your application, but integrate with an external system that stores user profile or personal data. For example, to satisfy data residency requirements like regional or on-premises data storage policies.
49
+
Another external user store scenario is to have Azure AD B2C handle the authentication for your application, but integrate with an external system that stores user profile or personal data. For example, to satisfy data residency requirements like regional or on-premises data storage policies. However, Azure AD B2C service itself is worldwide via the Azure public cloud.
45
50
46
-

51
+
:::image type="content" source="./media/overview/scenario-remoteprofile.png" alt-text="A logical diagram of Azure AD B2C communicating with an external user store.":::
47
52
48
-
Azure AD B2C can facilitate collecting the information from the user during registration or profile editing, then hand that data off to the external system. Then, during future authentications, Azure AD B2C can retrieve the data from the external system and, if needed, include it as a part of the authentication token response it sends to your application.
53
+
Azure AD B2C can facilitate collecting the information from the user during registration or profile editing, then hand that data off to the external system via API. Then, during future authentications, Azure AD B2C can retrieve the data from the external system and, if needed, include it as a part of the authentication token response it sends to your application.
49
54
50
55
## Progressive profiling
51
56
52
57
Another user journey option includes progressive profiling. Progressive profiling allows your customers to quickly complete their first transaction by collecting a minimal amount of information. Then, gradually collect more profile data from the customer on future sign-ins.
53
58
54
-

59
+
:::image type="content" source="./media/overview/scenario-progressive.png" alt-text="A visual depiction of progressive profiling.":::
55
60
56
61
## Third-party identity verification and proofing
57
62
58
-
Use Azure AD B2C to facilitate identity verification and proofing by collecting user data, then passing it to a third party system to perform validation, trust scoring, and approval for user account creation.
63
+
Use Azure AD B2C to facilitate identity verification and proofing by collecting user data, then passing it to a third-party system to perform validation, trust scoring, and approval for user account creation.
64
+
59
65
60
-

66
+
:::image type="content" source="./media/overview/scenario-idproofing.png" alt-text="A diagram showing the user flow for third-party identity proofing.":::
61
67
62
-
These are just some of the things you can do with Azure AD B2C as your business-to-customer identity platform. The following sections of this overview walk you through a demo application that uses Azure AD B2C. You're also welcome to move on directly to a more in-depth [technical overview of Azure AD B2C](technical-overview.md).
68
+
You have learned some of the things you can do with Azure AD B2C as your business-to-customer identity platform. The following sections of this overview walk you through a demo application that uses Azure AD B2C. You're also welcome to move on directly to a more in-depth [technical overview of Azure AD B2C](technical-overview.md).
63
69
64
70
## Example: WoodGrove Groceries
65
71
@@ -99,7 +105,7 @@ Clicking the **Create** button causes Azure AD B2C to redirect the user back to
99
105
100
106
### Authenticate business customers
101
107
102
-
When a customer selects one of the options under **Business customers**, the WoodGrove Groceries website invokes a different Azure AD B2C policy than it does for individual customers.
108
+
When a customer selects one of the options under **Business customers**, the WoodGrove Groceries website invokes a different Azure AD *B2C policy* than it does for individual customers. You learn what a *B2C policy* is in [technical overview of Azure AD B2C](technical-overview.md)
103
109
104
110
This policy presents the user with an option to use their corporate credentials for sign-up and sign-in. In the WoodGrove example, users are prompted to sign in with any work or school account. This policy uses a [multi-tenant Azure AD application](../active-directory/develop/howto-convert-app-to-be-multi-tenant.md) and the `/common` Azure AD endpoint to federate Azure AD B2C with any Microsoft 365 customer in the world.
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/quickstart-web-app-dotnet.md
+14-25Lines changed: 14 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,16 +9,18 @@ manager: celestedg
9
9
ms.service: active-directory
10
10
ms.topic: quickstart
11
11
ms.custom: "devx-track-csharp, mvc"
12
-
ms.date: 09/12/2019
12
+
ms.date: 10/01/2021
13
13
ms.author: mimart
14
14
ms.subservice: B2C
15
15
---
16
16
17
17
# Quickstart: Set up sign in for an ASP.NET application using Azure Active Directory B2C
18
18
19
-
Azure Active Directory B2C (Azure AD B2C) provides cloud identity management to keep your application, business, and customers protected. Azure AD B2C enables your applications to authenticate to social accounts and enterprise accounts using open standard protocols. In this quickstart, you use an ASP.NET application to sign in using a social identity provider and call an Azure AD B2C protected web API.
19
+
Azure Active Directory B2C (Azure AD B2C) provides cloud identity management to keep your application, business, and customers protected. Azure AD B2C enables your applications to authenticate to social accounts and enterprise accounts using open standard protocols.
20
+
21
+
In this quickstart, you use an ASP.NET application to sign in using a social identity provider and call an Azure AD B2C protected web API.
@@ -40,21 +42,21 @@ Azure Active Directory B2C (Azure AD B2C) provides cloud identity management to
40
42
1. In the sample application project folder, open the **B2C-WebAPI-DotNet.sln** solution in Visual Studio.
41
43
2. For this quickstart, you run both the **TaskWebApp** and **TaskService** projects at the same time. Right-click the **B2C-WebAPI-DotNet** solution in Solution Explorer, and then select **Set StartUp Projects**.
42
44
3. Select **Multiple startup projects** and change the **Action** for both projects to **Start**.
43
-
4. Click **OK**.
45
+
4. Select **OK**.
44
46
5. Press **F5** to debug both applications. Each application opens in its own browser tab:
45
47
46
48
- `https://localhost:44316/` - The ASP.NET web application. You interact directly with this application in the quickstart.
47
49
- `https://localhost:44332/` - The web API that's called by the ASP.NET web application.
48
50
49
51
## Sign in using your account
50
52
51
-
1. Click **Sign up / Sign in** in the ASP.NET web application to start the workflow.
53
+
1. Select **Sign up / Sign in** in the ASP.NET web application to start the workflow.
52
54
53
55

54
56
55
57
The sample supports several sign-up options including using a social identity provider or creating a local account using an email address. For this quickstart, use a social identity provider account from either Facebook, Google, or Microsoft.
56
58
57
-
2. Azure AD B2C presents a sign-in page for a fictitious company called Fabrikam for the sample web application. To sign up using a social identity provider, click the button of the identity provider you want to use.
59
+
2. Azure AD B2C presents a sign-in page for a fictitious company called Fabrikam for the sample web application. To sign up using a social identity provider, select the button of the identity provider you want to use.
58
60
59
61

60
62
@@ -66,40 +68,27 @@ Azure Active Directory B2C (Azure AD B2C) provides cloud identity management to
66
68
67
69
Azure Active Directory B2C provides functionality to allow users to update their profiles. The sample web app uses an Azure AD B2C edit profile user flow for the workflow.
68
70
69
-
1. In the application menu bar, click your profile name and select **Edit profile** to edit the profile you created.
71
+
1. In the application menu bar, select your profile name, and then select **Edit profile** to edit the profile you created.
70
72
71
73

72
74
73
-
2. Change your **Display name** or **City**, and then click **Continue** to update your profile.
75
+
2. Change your **Display name** or **City**, and then select **Continue** to update your profile.
74
76
75
-
The changed is displayed in the upper right portion of the web application's home page.
77
+
The change is displayed in the upper right portion of the web application's home page.
76
78
77
79
## Access a protected API resource
78
80
79
-
1. Click **To-Do List** to enter and modify your to-do list items.
81
+
1. Select **To-Do List** to enter and modify your to-do list items.
80
82
81
-
2. Enter text in the **New Item** text box. Click **Add** to call the Azure AD B2C protected web API that adds a to-do list item.
83
+
2. In the **New Item** text box, enter text. To call the Azure AD B2C protected web API that adds a to-do list item, select **Add**.
82
84
83
85

84
86
85
87
The ASP.NET web application includes an Azure AD access token in the request to the protected web API resource to perform operations on the user's to-do list items.
86
88
87
89
You've successfully used your Azure AD B2C user account to make an authorized call an Azure AD B2C protected web API.
88
90
89
-
## Clean up resources
90
-
91
-
You can use your Azure AD B2C tenant if you plan to try other Azure AD B2C quickstarts or tutorials. When no longer needed, you can [delete your Azure AD B2C tenant](faq.yml#how-do-i-delete-my-azure-ad-b2c-tenant-).
92
91
93
92
## Next steps
94
93
95
-
In this quickstart, you used a sample ASP.NET application to:
96
-
97
-
* Sign in with a custom login page
98
-
* Sign in with a social identity provider
99
-
* Create an Azure AD B2C account
100
-
* Call a web API protected by Azure AD B2C
101
-
102
-
Get started creating your own Azure AD B2C tenant.
103
-
104
-
> [!div class="nextstepaction"]
105
-
> [Create an Azure Active Directory B2C tenant in the Azure portal](tutorial-create-tenant.md)
94
+
[Create an Azure Active Directory B2C tenant in the Azure portal](tutorial-create-tenant.md)
0 commit comments