Rory Braybrook

Kinde supports SAML but only as a SP.. “Connecting Kinde as an SP to Azure AD B2C via SAML” is published by Rory Braybrook in The new control plane.

Entra External ID can currently be used as a SAML SP but not as an IDP.. “Connecting Entra External ID as an SP to Azure AD B2C via SAML” is published by Rory Braybrook in The new control plane.

I’ve answered a few questions lately about this over on stackoverflow. Guest accounts B2C does not have a concept of a guest account, and you cannot invite users (in terms of sending an email invite). The invite in the portal is only for creating…

I’ve written several “Connecting” posts over the years describing how to connect one IDP to another. To explore the entire ‘Connecting’ series, simply follow my Authory link and enter “connecting” in the search box. I’ve never written up this…

I’ve been talking to several people recently who are using Identityserver4 but who now want to replace it, as it was only maintained with security updates until November 2022. They were using IdentityServer4 because it provided authentication and…

Fifty years ago today, I started my career in IT. I was in my second year of university, and my parents lived in Malawi, which had exchange control, so they could only send me K30 a month, which didn’t cover much! Obviously, it went a lot further…

CIAM External ID was announced at Build and is currently in public preview. CIAM (Customer IAM) is the successor to Azure AD B2C. And, of course, I then got a million questions about the future of B2C, so I decided to write this post. Note that the…

This was to decode a SAML payload derived for Azure AD B2C. This particular customer had a website that only worked in Chrome, and security had disabled all add-ons. e.g. a SAML tracer. They also limited access to external sites e.g. online SAML…

stackoverflow recently posted that they would not accept any answer generated by ChatGPT. So I decided to find out how good ChatGPT was. Question 1 Why does the AD FS OpenID Connect userinfo endpoint return only “sub” Answer The AD FS OpenID Connect…

This is the other side of my previous post: Just to be clear, we are talking about SAML 2.0 (the protocol) and not SAML (the token). Once you figure out how the client side works, you need an Identity Provider (IDP) to test against. Normally, the…

I see this question over on stackoverflow every day. “My boss says we have to make the application SAML compliant so we can authenticate with a SAML IDP. I’m lost” “I’m trying to build up a SAML Request with the C# class xxx and it’s not working”.…

First read my previous post for a lot of the background so I don’t have to repeat it twice. That post covers the SP Initiated scenario. This post uses a different branch (for IDP Initiated) in the Github sample. The documentation is here. From the…

I’ve been doing a lot of work with custom policies lately and came across a number of things that might help other custom policy developers so I thought it worth while to note them. This article will be updated as I come across other tips and tricks.…

There are a lot of custom policy samples scattered all over the Internet so I thought I would try and collate them in one place Invariably, the links will change and break. Please report these in the comments. Also, please report any others that you…

I’ve answered hundreds of questions around Active Directory Federation Services (ADFS) claims rules in the old MDSN forum and this MSDN forum and in my previous blog and on stackoverflow so I thought I would consolidate some of the rules here. I…

I’ve done a few of these and thought that I would note some of the gotchas I experienced. There’s a good article here that takes you through the basics and it includes a complete SAML sample on Github that you can use as a reference. The notes refer…

There is some background about using Azure AD B2C as a SAML 2.0 IDP here so read that first. The article also has links to some Microsoft Docs articles that you should read as well. These articles shows you how to do the basic B2C and SAML setup,…

There is a good article on this but I found a number of gotchas since the article is general in nature. I got this working using the SP initiated custom policy referenced in the article and using the referenced SAML Test application. The custom…