Using “Entra Local” with the MSAL librariesUsing “Entra Local” with the MSAL libraries The repo is here. Entra Local is “A local, MSAL-compatible emulator of Microsoft Entra ID, for application developers. Entra Local exposes the same … Jul 08 26July 08, 2026Article at Medium
Some notes on migrating from Azure AD B2C to Entra External ID (EEID) (Part 3)Some notes on migrating from Azure AD B2C to Entra External ID (EEID) (Part 3) I have written some posts on this — Part 1 and Part 2, and I have posted several articles on what I call the hybrid … Oct 15 25October 15, 2025Article at Medium
Using native authentication in Entra External ID aka bring your own login screen and login with email and password😃Back in the day when ADFS came out, the first question I was asked was, “Can I customise and use my own login screen?” — sorry, no. And then, when Azure AD came out, the first question I was asked was, “Can I customise and use my own login screen?” —… Apr 02 24April 02, 2024Article at Medium
50 years — from punch cards to CopilotFifty years ago today, I started my career in IT. I was in my second year of university, and my parents lived in Malawi, which had exchange control, so they could only send me K30 a month, which didn’t cover much! Obviously, it went a lot further… Jan 31 24January 31, 2024Article at Medium
Some thoughts on CIAM External ID and Azure AD B2CCIAM External ID was announced at Build and is currently in public preview. CIAM (Customer IAM) is the successor to Azure AD B2C. And, of course, I then got a million questions about the future of B2C, so I decided to write this post. Note that the… May 30 23May 30, 2023Article at Medium
You can retire your on-premises MFA Server and the ADFS deployment needed to support it using the new Azure MFA Server Migration Utility - @azuread - techcommunity.microsoft.com/t5/microsoft-e… Sep 01 22September 01, 2022Post at @rbrayb
New claims capabilities for migrating apps on ADFS to @azuread. Filtering groups using substring, adding additional attributes, claims transformations and regex - techcommunity.microsoft.com/t5/azure-activ… Apr 25 22April 25, 2022Post at @rbrayb
I need a SAML IDP to test — now!This is the other side of my previous post: Just to be clear, we are talking about SAML 2.0 (the protocol) and not SAML (the token). Once you figure out how the client side works, you need an Identity Provider (IDP) to test against. Normally, the… Apr 11 22April 11, 2022Article at Medium
I need a SAML stack — now!I see this question over on stackoverflow every day. “My boss says we have to make the application SAML compliant so we can authenticate with a SAML IDP. I’m lost” “I’m trying to build up a SAML Request with the C# class xxx and it’s not working”.… Feb 24 22February 24, 2022Article at Medium
Lots of tools to help you e.g. "ADFS Application Activity Report" to quickly identify which ADFS apps are ready for an upgrade and how to configure them and "Staged rollout to cloud authentication" so you can migrate users in a staged and controlled… Nov 18 21November 18, 2021Post at @rbrayb
Tips and tricks for working with custom policies in Azure AD B2CI’ve been doing a lot of work with custom policies lately and came across a number of things that might help other custom policy developers so I thought it worth while to note them. This article will be updated as I come across other tips and tricks.… Nov 11 21November 11, 2021Article at Medium
Two of the top three search articles in my blog this week were ADFS related. Who said ADFS was dead? 😀 Oct 14 21October 14, 2021Post at @rbrayb
Everything you wanted to know about Azure AD B2C custom policy samples but were afraid to ask!There are a lot of custom policy samples scattered all over the Internet so I thought I would try and collate them in one place Invariably, the links will change and break. Please report these in the comments. Also, please report any others that you… Aug 18 21August 18, 2021Article at Medium
I should really work out how much time I spend on @StackOverflow removing the "ADFS" tag from "ADF" questions and the "WIF" tag from "WIFI" ones 😀 Jul 28 21July 28, 2021Post at @rbrayb
Generating self-signed certificates on WindowsIf you do anything with Identity, you’ll know you need certificates — lots of them — and that normally means self-signed to keep the costs down or because you just need it for a short time before you tear down the VM or because you don’t have a PKI… Apr 14 21April 14, 2021Article at Medium
Just published "Tips and tricks with ADFS claims rules" - medium.com/the-new-contro… Jan 11 21January 11, 2021Post at @rbrayb
Tips and tricks with ADFS claims rulesI’ve answered hundreds of questions around Active Directory Federation Services (ADFS) claims rules in the old MDSN forum and this MSDN forum and in my previous blog and on stackoverflow so I thought I would consolidate some of the rules here. I… Jan 11 21January 11, 2021Article at Medium
ADFS claims rulesThere are some good “starter” links: There are also a number of good links around Active Directory Federation Services (ADFS) claims rules but these are old articles and the original links give 404 so I’m “saving” them just so I know I can always… Nov 16 20November 16, 2020Article at Medium
Zero TrustI’ve seen quite a lot around this lately and thought I would try and summarize the tons of stuff out there. Essentially, zero trust means that you assume the enemy is already inside your perimeter and you should trust no one. “The zero trust model… Oct 20 20October 20, 2020Article at Medium
Authenticating to Active Directory Federation Services (ADFS) 2019 with .NET Core 3.1Googling this shows only one sample and that sample uses WS-Federation not OpenID Connect (OIDC)! There doesn’t appear to be anything else and you can’t use the usual ADAL / MSAL libraries because there aren’t .NET Core versions yet. (There are… Oct 08 20October 08, 2020Article at Medium
