TTaabbllee ooff CCoonntteennttss Overview Get started Test drive an Azure AD B2C web app Test drive an Azure AD B2C desktop app Test drive an Azure AD B2C single-page app Create an Azure AD B2C Directory Register your application Built-In policies Mobile & desktop apps Overview iOS Android .NET Xamarin Web apps Overview ASP.NET ASP.NET Core Node.js Single page apps Overview JavaScript using MSAL JavaScript using Hello Web APIs ASP.NET ASP.NET Core Node.js Call a .NET Web API Guides Configure identity providers Microsoft Account Facebook Google Amazon LinkedIn Twitter Weibo QQ WeChat Set up self-service password reset Customizing the UI Helper tool for customization Use the Azure AD Graph API Obtain access tokens Disable email verification Configure tokens Enable MFA Use custom attributes Customize password Language customization Use the reporting API Migrate users Identity Experience Framework Custom policies Guides Get started Configure OIDC/OAUTH providers Configure SAML providers Integrate RESTful APIs User flows Troubleshooting Reference Release notes SSO session providers Language customization Trust Framework definition Reference Code samples Glossary Types of applications Authentication protocols Tokens Region availability & data residency Enable billing Threat management Issues when creating a directory Extensions app Related Azure Active Directory Multi-factor authentication Resources Azure AD B2C feedback forum Azure Roadmap Frequently asked questions Pricing Pricing calculator Service updates Stack Overflow Support Videos Azure AD B2C: Focus on your app, let us worry about sign-up and sign-in 1/17/2018 • 2 min to read • Edit Online Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available global service that scales to hundreds of millions of identities. Built on an enterprise-grade secure platform, Azure AD B2C keeps your applications, your business, and your customers protected. With minimal configuration, Azure AD B2C enables your application to authenticate: Social Accounts (such as Facebook, Google, LinkedIn, and more) Enterprise Accounts (using open standard protocols, OpenID Connect or SAML) Local Accounts (email address and password, or username and password) Get started First, get your own tenant by using the steps outlined in Create an Azure AD B2C tenant. Then choose your application development scenario: Overview .NET iOS Xamarin Android Mobile & Desktop Apps Overview Node.js ASP.NET ASP.NET Core Web Apps Overview JavaScript Single Page Apps ASP.NET Call a .NET Web API ASP.NET Core Node.js Web APIs What's new Check back here often to learn about future changes to the Azure Active Directory B2C. We also tweet about any updates by using @AzureAD. In addition to "Built-in Policies" (General Availability), the "Custom Policies" feature is now available in public preview. Custom policies are for identity pros that need control over the composition of their identity experience. The Access Token feature is now available in public preview. General Availability of Europe-based Azure AD B2C directories has been announced. Check out our growing library of code samples on Github! How-to articles Learn how to use specific Azure Active Directory B2C features: Configure Facebook, Google+, Microsoft account, Amazon, and LinkedIn accounts for use in your consumer- facing applications. Use custom attributes to collect information about your consumers. Enable Azure Multi-Factor Authentication in your consumer-facing applications. Set up self-service password reset for your consumers. Customize the look and feel of sign-up, sign in, and other consumer-facing pages that are served by Azure Active Directory B2C. Use the Azure Active Directory Graph API to programmatically create, read, update, and delete consumers in your Azure Active Directory B2C tenant. Next steps These links are useful for exploring the service in depth: See the Azure Active Directory B2C pricing information. Review our code samples for Azure Active Directory B2C. Get help on Stack Overflow by using the azure-ad-b2c tag. Give us your thoughts by using User Voice, we want to hear them! Review the Azure AD B2C Protocol Reference. Review the Azure AD B2C Token Reference. Read the Azure Active Directory B2C FAQs. File support requests for Azure Active Directory B2C. Get security updates for our products We encourage you to get notifications of when security incidents occur by visiting this page and subscribing to Security Advisory Alerts. Test drive an Azure AD B2C enabled web app 12/11/2017 • 3 min to read • Edit Online Azure Active Directory B2C provides cloud identity management to keep your application, business, and customers protected. This quickstart uses a sample to-do list app to demonstrate: Sign-in with a custom login page. Sign-in using a social identity provider. Creating and managing your Azure AD B2C account and user profile. Calling a web API secured by Azure AD B2C. Prerequisites Visual Studio 2017 with the ASP.NET and web development workload. A social account from either Facebook, Google, Microsoft, or Twitter. If you don't have an Azure subscription, create a free account before you begin. Download the sample Download or clone the sample application from GitHub. Run the app in Visual Studio In the sample application project folder, open the solution in Visual Studio. B2C-WebAPI-DotNet.sln The solution is a sample to-do list application consisting of two projects: TaskWebApp – An ASP.NET MVC web application where a user can manage their to-do list items. TaskService – An ASP.NET Web API backend that manages operations performed on a user's To-do list items. The web app calls this web API and displays the results. For this quickstart, you need to run both the and projects at the same time. TaskWebApp TaskService 1. In the Visual Studio menu, select Projects > Set StartUp Projects.... 2. Select Multiple startup projects radio button. 3. Change the Action for both projects to Start. Click OK. Select Debug > Start Debugging to build and run both applications. Each application opens in its own browser tab: - This page is the ASP.NET web application. You interact directly with this application in https://localhost:44316/ the quickstart. - This page is the web API that is called by the ASP.NET web application. https://localhost:44332/ Create an account Click the Sign up / Sign in link in the ASP.NET web application to start the Sign Up or Sign In workflow. When creating an account, you can use an existing social identity provider account or an email account. For this quickstart, use a social identity provider account from either Facebook, Google, Microsoft, or Twitter. SSiiggnn uupp uussiinngg aa ssoocciiaall iiddeennttiittyy pprroovviiddeerr To sign up using a social identity provider, click the button of the identity provider you want to use. You need to authenticate (sign-in) using your social account credentials and authorize the application to read information from your social account. By granting access, the application can retrieve profile information from the social account such as your name and city. Finish the sign-in process for the identity provider. For example, if you chose Twitter, enter your Twitter credentials and click Sign in. Your new Azure AD B2C account profile details are pre-populated with information from your social account. Update the Display Name, Job Title, and City fields and click Continue. The values you enter are used for your Azure AD B2C user account profile. You have successfully: Authenticated using an identity provider. Created an Azure AD B2C user account. Edit your profile Azure Active Directory B2C provides functionality to allow users to update their profiles. In the web application menu bar, click your profile name and select Edit profile to edit the profile you created.