Microsoft Entra External ID

azure Identity providerazure-entra-external-id

Customer and partner identity: sign-up and sign-in for consumers in an external tenant, and B2B guest collaboration in a workforce tenant.

Provider: azure
Kind: Identity provider
Category: Security
Official docs: https://learn.microsoft.com/en-us/entra/external-id/external-identities-overview
Also known as: Azure AD B2C

Properties · 5 set by this component

property	type	values	required	kind default	this component
authorizationModel	enum	none \| rbac \| abac \| rebac	no	rbac	▸ rbac
centralised · advanced	boolean	—	no	true	▸ true
conditionalAccess · component property	boolean	—	no	false	inherited
customBranding · component property	boolean	—	no	false	inherited
managed	boolean	—	no	true	▸ true
mfa	boolean	—	no	false	▸ false
protocol	enum	oidc \| saml \| oauth2 \| iam \| custom	no	oidc	▸ oidc
socialIdentityProviders · component property	boolean	—	no	false	inherited
tenantConfiguration · component property	enum	workforce \| external	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "entra-external-id", component: "azure-entra-external-id" }

Other Identity provider products · 47

and 7 more → Identity provider page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Microsoft Entra External ID: CIAM for consumers and B2B guests, in a workforce or an external tenant.
3# "Microsoft Entra External ID Overview": external tenants start with neutral branding, social identity
4# providers are ones "that you enable", and MFA for customers comes from an opt-in Conditional Access policy.
5schemaVersion: "1"
6type: "component"
7id: "azure-entra-external-id"
8kind: "identity-provider"
9provider: "azure"
10docs: "https://learn.microsoft.com/en-us/entra/external-id/external-identities-overview"
11aliases: ["Azure AD B2C"]
12defaults:
13  protocol: "oidc"
14  authorizationModel: "rbac"
15  centralised: true
16  managed: true
17  mfa: false
18properties:
19  tenantConfiguration:
20    type: "enum"
21    values: ["workforce", "external"]
22  socialIdentityProviders:
23    type: "boolean"
24    default: false
25  customBranding:
26    type: "boolean"
27    default: false
28  conditionalAccess:
29    type: "boolean"
30    default: false

The same page as markdown, for an agent: /catalogue/components/azure-entra-external-id.md