Skip to content

Instantly share code, notes, and snippets.

@jyotendra
Last active November 28, 2018 11:57
Show Gist options
  • Save jyotendra/8ef30fa41f8a13128f117c039fa0e243 to your computer and use it in GitHub Desktop.
Save jyotendra/8ef30fa41f8a13128f117c039fa0e243 to your computer and use it in GitHub Desktop.
Azure Identity Service - Notes

Can Azure AD be used for social login ?

Came to understand that for user authentication via social login - Azure AD is not appropriate. Its more for organizing employees in premises and to provide them access to apps. It also provides SSO capabilities for employees under organization structure.

Azure AD can be used for customer facing websites but then they will be restricted to sign-in by using work-mail or at the very best by using microsoft account (outlook, live etc).

Azure AD does not provide social login feature. However, Azure AD B2C address this exact scenario.

Azure AD B2C uses OpenId Connect protocol

It uses OpenId which is built on top of OAuth to connect with social identity providers.

These links might help:

  1. Configure OpenId for your app
  2. Introduction to OpenId and how it compares to OAuth
  3. App demo using Azure AD B2C
  4. Adding policies in Azure AD B2C

Is it economical ?

Hell yes, their free tier has 50,000 user registration quota and 50,000 per month auth request, which is way cheaper than Auth0 and other identity providers. Implementing auth securely can be done, but is a tough business. One mistake and it can leave vulnerablity in app. If we go by monolith architecture then we can use identity framework. But for simple apps, Azure AD B2C is a viable option.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment