azure-active-directory-b2c

name	azure-active-directory-b2c
description	Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when designing custom policies/user flows, MFA & IdP sign-in, app/API registration, CI/CD deployments, or Sentinel logging, and other Azure Active Directory B2C related development tasks. Not for Azure Information Protection (use azure-information-protection), Azure Role-based access control (use azure-rbac), Azure Security (use azure-security), Azure Portal (use azure-portal).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-04-05","generator":"docs2skills/1.0.0"}

Azure Active Directory B2C Skill

This skill provides expert guidance for Azure Active Directory B2C. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L43	Diagnosing and fixing Azure AD B2C errors, debugging custom policies and user flows, and using Application Insights to trace and troubleshoot policy execution.
Best Practices	L44-L52	Best practices for configuring Azure AD B2C, designing user flows/custom policies, securing MFA and architecture, and detecting/mitigating credential and account attacks.
Decision Making	L53-L61	Guidance on choosing B2C app types, understanding MAU billing/tiers, planning regions and data residency, and deciding on usage, migration strategy, and user migration approaches.
Architecture & Design Patterns	L62-L70	Global Azure AD B2C customer identity architectures, comparing funnel- vs region-based designs, and step-by-step proof-of-concept implementations for each pattern
Limits & Quotas	L71-L78	Service limits, quotas, and restrictions for Azure AD B2C tenants, including directory size, token formats/constraints, and tenant creation and scaling limits.
Security	L79-L95	Security hardening for Azure AD B2C: MFA, Conditional Access, Identity Protection, CAPTCHA, keys/certs, TLS/ciphers, admin roles, tenant control, API connector security, and Sentinel logging.
Configuration	L96-L210	Configuring Azure AD B2C: custom policies, user flows, tokens, MFA, identity providers, claims/transformations, app/API registration, UI/localization, SSO, security, and advanced auth options.
Integrations & Coding Patterns	L211-L323	End-to-end patterns for integrating Azure AD B2C into apps and APIs, configuring identity providers, custom policies, fraud/risk tools, and securing traffic with proxies, WAFs, and monitoring.
Deployment	L324-L328	Automating deployment of Azure AD B2C custom policies using CI/CD pipelines, including setup steps, YAML examples, and best practices for Azure Pipelines and GitHub Actions.

Troubleshooting

Topic	URL
Azure AD B2C error codes and troubleshooting reference	https://learn.microsoft.com/en-us/azure/active-directory-b2c/error-codes
Troubleshoot Azure AD B2C custom policies and user flows	https://learn.microsoft.com/en-us/azure/active-directory-b2c/troubleshoot
Troubleshoot Azure AD B2C custom policies with Application Insights	https://learn.microsoft.com/en-us/azure/active-directory-b2c/troubleshoot-with-application-insights

Best Practices

Topic	URL
Apply Azure AD B2C integration and configuration best practices	https://learn.microsoft.com/en-us/azure/active-directory-b2c/best-practices
Developer guidance for Azure AD B2C user flows and custom policies	https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-policy-developer-notes
Secure phone-based MFA in Azure AD B2C using monitoring and alerts	https://learn.microsoft.com/en-us/azure/active-directory-b2c/phone-based-mfa
Apply security best practices to Azure AD B2C architecture	https://learn.microsoft.com/en-us/azure/active-directory-b2c/security-architecture
Mitigate credential attacks in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/threat-management

Decision Making

Topic	URL
Choose appropriate application types for Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/application-types
Understand Azure AD B2C MAU billing and tier selection	https://learn.microsoft.com/en-us/azure/active-directory-b2c/billing
Plan Azure AD B2C region availability and data residency	https://learn.microsoft.com/en-us/azure/active-directory-b2c/data-residency
Plan Azure AD B2C usage and migration decisions	https://learn.microsoft.com/en-us/azure/active-directory-b2c/faq
Choose a user migration approach to Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/user-migration

Architecture & Design Patterns

Topic	URL
Apply funnel-based global identity design with Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-funnel-based-design
Implement funnel-based global identity proof of concept in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-proof-of-concept-funnel
Implement region-based global identity proof of concept in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-proof-of-concept-regional
Apply region-based global identity design with Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-region-based-design
Design a global customer identity solution with Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-solutions

Limits & Quotas

Topic	URL
Review Azure AD B2C service limits and restrictions	https://learn.microsoft.com/en-us/azure/active-directory-b2c/service-limits
Monitor and manage Azure AD B2C directory size quota	https://learn.microsoft.com/en-us/azure/active-directory-b2c/tenant-management-directory-quota
Understand Azure AD B2C token types, contents, and constraints	https://learn.microsoft.com/en-us/azure/active-directory-b2c/tokens-overview
Create Azure AD B2C tenant and understand tenant limits	https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-tenant

Security

Topic	URL
Enable CAPTCHA protection in Azure AD B2C user flows and policies	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-captcha
Use Identity Protection and Conditional Access with Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/conditional-access-identity-protection-overview
Add Conditional Access and MFA to Azure AD B2C user flows	https://learn.microsoft.com/en-us/azure/active-directory-b2c/conditional-access-user-flow
Configure Microsoft Sentinel analytics for Azure AD B2C logs	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-security-analytics-sentinel
TLS and cipher suite requirements for Azure AD B2C integrations	https://learn.microsoft.com/en-us/azure/active-directory-b2c/https-cipher-tls-requirements
Investigate and remediate identity risk in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-protection-investigate-risk
Enable and configure multifactor authentication in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/multi-factor-authentication
Manage Azure AD B2C policy keys for secure token signing	https://learn.microsoft.com/en-us/azure/active-directory-b2c/policy-keys-overview
Assign Azure AD B2C roles for resource access control	https://learn.microsoft.com/en-us/azure/active-directory-b2c/roles-resource-access-control
Secure REST APIs used by Azure AD B2C API connectors	https://learn.microsoft.com/en-us/azure/active-directory-b2c/secure-rest-api

Configuration

Topic	URL
Configure SSPR technical profiles in Azure AD B2C custom policies	https://learn.microsoft.com/en-us/azure/active-directory-b2c/aad-sspr-technical-profile
Configure Microsoft Entra technical profiles in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/active-directory-technical-profile
Add and configure API connectors in Azure AD B2C sign-up flows	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-api-connector
Configure token enrichment with external APIs in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-api-connector-token-enrichment
Add external identity providers to Azure AD B2C tenant	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-identity-provider
Add and configure native client apps in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-native-application
Configure Azure AD B2C custom policy for password change	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-password-change-policy
Configure password reset user flows in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-password-reset-policy
Configure profile editing user flows in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-profile-editing-policy
Configure resource owner password credentials (ROPC) flow in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-ropc-policy

Integrations & Coding Patterns

Topic	URL
Request and use access tokens from Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/access-tokens
Extend Azure AD B2C user flows with API connectors	https://learn.microsoft.com/en-us/azure/active-directory-b2c/api-connectors-overview
Implement OAuth 2.0 authorization code flow in Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/authorization-code-flow
Route Azure AD B2C logs to Azure Monitor	https://learn.microsoft.com/en-us/azure/active-directory-b2c/azure-monitor
Integrate Azure AD B2C authentication into a sample Node.js web app	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-a-sample-node-web-app
Integrate Azure AD B2C authentication into an Azure Static Web App	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-in-azure-static-app
Integrate Azure AD B2C authentication into an Azure Web App	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-in-azure-web-app
Configure Node.js web app and API with Azure AD B2C	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-in-sample-node-web-app-with-api
Configure Azure AD B2C authentication in sample Android app	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-sample-android-app
Integrate Azure AD B2C authentication into an Angular SPA	https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-sample-angular-spa-app

Deployment

Topic	URL
Deploy Azure AD B2C custom policies with Azure Pipelines	https://learn.microsoft.com/en-us/azure/active-directory-b2c/deploy-custom-policies-devops
Deploy Azure AD B2C custom policies with GitHub Actions	https://learn.microsoft.com/en-us/azure/active-directory-b2c/deploy-custom-policies-github-action