Rory Braybrook

Using passkeys with Entra External ID (EEID) The docs are here. The repo is here. In EEID, ensure FIDO2 is enabled in Authentication methods. Click on “Passkey”: Click on “Configure”: I use …

How does Microsoft’s SMS retirement affect CIAM products Microsoft has provided guidance around the retirement of Microsoft-provided SMS and voice authentication in Microsoft Entra ID. “Beginning …

Using social federation via native auth in Entra External ID (EEID) — Part II Read my previous post on this first. The JWT that you get back from a local login looks like: { "aud": "9e...37", …

Analysing Azure AD B2C custom policies to aid with migration to Entra External ID (EEID) The docs are here. “The Migration Policy Analyzer is available directly in your Azure AD B2C tenant. It …

Getting a checklist before Azure AD B2C migration using EntraExporter The repo is here. Before you migrate B2C to Entra External ID (EEID) or to another IDP, it helps to know what components you …

Azure AD B2C to Entra External ID (EEID) migration tools The tooling docs for B2C migration are here. There is now a whole set of tools to help you with your migration. In addition, EEID has new …

Using the High Scale Compatibility (HSC) mode in Entra External ID (EEID) for enabling Azure AD B2C migration The docs are here and here. A picture is worth a thousand words: or a later one: Both B2C …

On Entra External ID (EEID) custom extensions and event listeners — Introduction I have a series of posts on this here. There is a wealth of data in the metadata endpoint: GET …

Connecting Entra External ID (EEID) to Entra ID as an external provider via OIDC Note: This is not a documented feature and may be changed or removed. Use at your own risk. A very common use case is …

Creating a feature flag in Azure AD B2C I was asked this question by a customer. They wanted to test a new feature and needed a feature flag to turn it off if need be, without changing or uploading …

Entra External ID (EEID) AADSTS1100001 error with token issuance custom authentication extensions The actual error is: AADSTS1100001: Non-retryable error has occurred. Underlying error code: …

Azure AD B2C to Entra External ID (EEID) Migration Kit — Attribute Mapping You can see the whole series in this list. The repo. is here. One feature of the migration kit is that it allows you to …

Azure AD B2C to Entra External ID (EEID) Migration Kit — Evaluating the login You can see the whole series in this list. The repo. is here. Assume the import and export are successfully …

Using the ROPC flow with Azure AD B2C Yes, I know it’s not secure, but that’s not the point of this article 😃 Back in the day (actually 2018!), I wrote a post about this, and it worked. The …

Azure AD B2C to Entra External ID (EEID) Migration Kit — Start-LocalImport You can see the whole series in this list. The repo. is here. Finally, after a number of posts to set the scene, we get to …

Azure AD B2C to Entra External ID (EEID) Migration KitStart — Start-LocalExport You can see the whole series in this list. The repo. is here. Finally, after a number of posts to set the scene, we …

Azure AD B2C to Entra External ID (EEID) Migration Kit — Testing You can see the whole series in this list. The repo. is here. There are some PowerShell utilities in the gist. Running the function …

Azure AD B2C to Entra External ID (EEID) Migration Kit — Configure-ExternalIdJit This script is essentially automating the steps in the Learn article to set up the JIT password migration You can …

Azure AD B2C to Entra External ID (EEID)Migration Kit — Overview The GitHub repo. is here. The supporting Learn doc. for JIT migration is here. Note: This is a large repo. and there is a ton of …

Using the GitHub Spec Kit to compare the features in Azure AD B2C and Entra External ID The docs. are here, and the introductory video is here. Note that this is not a deep dive into …