I have a working B2C Tenant that authenticates a MSAL mobile application as well as a web portal. It currently just has 1 identity provider which is 'Local Account'. I also have a separate enterprise Active Directory instance the rest of my organization uses and we want to incorporate that separate AD instance as an identity provider for our B2C Tenant. I see how to add other identity providers such as Google/FB but I was wondering if it's possible to add the external AD instance as a 'New OpenID Connect provider'? I've been trying to find documentation on whether or not this is possible but I'm a bit lost in the sauce. Thanks for any tips!
1 Answers
Active Directory is just a repository that contains user information.
It does not have an Identity framework.
The easiest solution would be to install ADFS on top of this AD and then use OIDC to connect the two.
The harder way is to write a bridge that talks to AD via LDAP on one side and implements OIDC on the other. I don't know of any software that does this.
The other option is to use a third-party IDP.
e.g. Auth0 has an AD/LDAP Connector that will talk to AD and also implements OIDC.
Related