rbrayb rbrayb

NZ Microsoft Identity dude. Microsoft MVP (Security). Entra ID/Azure AD B2C/Entra External ID (CIAM)/VC. Presentations - https://rbrayb.github.io/Presentations

38 followers · 0 following

Sole trader
Auckland NZ
https://medium.com/the-new-control-plane
@rbrayb
https://stackoverflow.com/users/9922/rbrayb

View GitHub Profile

Recently created

Least recently created

Recently updated

Least recently updated

rbrayb / SignUpOrSigninSAML.xml

Created April 25, 2024 21:41

Connecting Azure AD B2C as an SP to Entra ID via SAML

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="tenant.onmicrosoft.com" PolicyId="B2C_1A_signup_signinSAMLMeta" PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_signup_signinSAMLMeta"
	DeploymentMode="Development"
	UserJourneyRecorderEndpoint="urn:journeyrecorder:applicationinsights">

	<BasePolicy>
	<TenantId>tenant.onmicrosoft.com</TenantId>
	<PolicyId>B2C_1A_TrustFrameworkExtensionsSAMLMeta</PolicyId>

rbrayb / EntraIDFed.xml

Created April 23, 2024 21:45

Federating with Azure AD B2C without creating a shadow account

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="tenant.onmicrosoft.com" PolicyId="B2C_1A_signup_signin_EntraIDFed" PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_signup_signin_EntraIDFed"
	DeploymentMode="Development"
	UserJourneyRecorderEndpoint="urn:journeyrecorder:applicationinsights">

	<BasePolicy>
	<TenantId>tenant.onmicrosoft.com</TenantId>
	<PolicyId>B2C_1A_TRUSTFRAMEWORKEXTENSIONSMFA</PolicyId>

rbrayb / Captcha.xml

Created April 18, 2024 23:56

Using CAPTCHA in Azure AD B2C

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="tenant.onmicrosoft.com" PolicyId="B2C_1A_Captcha" PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_Captcha" DeploymentMode="Development" UserJourneyRecorderEndpoint="urn:journeyrecorder:applicationinsights">

	<BasePolicy>
	<TenantId>tenant.onmicrosoft.com</TenantId>
	<PolicyId>B2C_1A_TrustFrameworkExtensions-Captcha</PolicyId>
	</BasePolicy>

rbrayb / Table.csv

Created February 9, 2024 04:07

Confusion around B2B with Entra External ID for customers (CIAM)

Tenant	Creation method	User type
Entra ID	Invite	Guest
Entra ID	Self service sign up	Guest
Entra External ID (CIAM)	Invite	Guest
Entra External ID (CIAM)	Self service sign up	Member

rbrayb / Diff.csv

Last active February 27, 2025 20:12

Differences between Azure AD B2C and Entra External ID for Customers (CIAM)

Feature	B2C	CIAM
Federation
Custom OIDC	Yes	Yes
Entra ID	Yes	Note 1
Microsoft account	Yes	Note 2
Social	Lots	Facebook and Google and Apple
SAML	Yes - direct	Note 3
WS-Fed	No	Note 3
-	-	-
User flows

rbrayb / Link.xml

Last active January 24, 2024 23:27

Another look at account linking in Azure AD B2C

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="tenant.onmicrosoft.com" PolicyId="B2C_1A_Link_Azure" PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_Link_Azure">

	<BasePolicy>
	<TenantId>tenant.onmicrosoft.com</TenantId>
	<PolicyId>B2C_1A_TRUSTFRAMEWORKEXTENSIONS</PolicyId>
	</BasePolicy>

rbrayb / Guest_SUSI.xml

Created December 18, 2023 01:51

Logging in with a guest account in Azure AD B2C

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06"
	PolicySchemaVersion="0.3.0.0"
	TenantId="tenant.onmicrosoft.com"
	PolicyId="B2C_1A_Guest_SUSI"
	PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_Guest_SUSI">

rbrayb / ClientCredentials-API.xml

Created December 1, 2023 02:23

Using the client credentials flow inside of Azure AD B2C

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="tenant.onmicrosoft.com" PolicyId="B2C_1A_ClientCred_API" PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_ClientCred_API" DeploymentMode="Development" UserJourneyRecorderEndpoint="urn:journeyrecorder:applicationinsights">

	<BasePolicy>
	<TenantId>tenant.onmicrosoft.com</TenantId>
	<PolicyId>B2C_1A_TRUSTFRAMEWORKEXTENSIONSMFA</PolicyId>
	</BasePolicy>

rbrayb / CreateUser.json

Last active November 19, 2023 19:38

Reading a user record in Azure AD B2C via a phone number

	{
	"accountEnabled": true,
	"displayName": "Read Phone",
	"givenName": "Read",
	"surname": "Phone",
	"mailNickname": "Phone-Read",
	"userPrincipalName": "[email protected]",
	"passwordProfile": {
	"forceChangePasswordNextSignIn": false,
	"password": "xWwuiasduidWH-d"

rbrayb / AuthsignalMFA.xml

Last active May 23, 2024 05:58

Changing the MFA provider for Azure AD B2C

	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="tenant.onmicrosoft.com" PolicyId="B2C_1A_AuthSignalMFA" PublicPolicyUri="http://tenant.onmicrosoft.com/B2C_1A_AuthSignalMFA"
	DeploymentMode="Development"
	UserJourneyRecorderEndpoint="urn:journeyrecorder:applicationinsights"
	>

	<BasePolicy>
	<TenantId>tenant.onmicrosoft.com</TenantId>

Newer Older