Hi Everyone,
I am using Azure AD B2C as an identity provider for the sign-in and sign-up process, I've some questions regarding this:-
1- After signing up using Azure ad b2c contact will be created in CRM, if someone updates the email from the profile section in the portal, the email will be updated in CRM but it will not be updated in the Azure portal.
2- How to revoke portal access to users, from CRM. If someone accesses the portal from Azure ad b2c I want to remove those users from my portal. How can I achieve this
Thank you.
@Fubar Thanks for you post Fubar.
I know there is some documentation, but it need to do API calls to our Azure B2C via PowerAutomate and i do not know which HTTP Actions and URL i need to use. I registered an app in the Azure B2C for the API Calls with the needed permissions. I tried it with the "HTTP with Microsoft Entra" action but it did not worked out. I added the B2C URL in the "Base Resource URL" section and the Application ID URI from my created app in the "Microsoft Entra ID Resource URI (Application ID URI)" section.
Can you add some information here, maybe you tried it before?
@_Mayank wrote:
1- After signing up using Azure ad b2c contact will be created in CRM, if someone updates the email from the profile section in the portal, the email will be updated in CRM but it will not be updated in the Azure portal.
Correct. This is the same as any other External Identity Provider (such as Facebook etc etc). If needed you can push an email address update into B2C from Dataverse by using the Graph API (can be done via Flow or plugin or custom workflow activity), the guid of the B2C user is held in the External Identity record linked to the Contact record (but note, technically you can enable multiple Identity Providers so the table can contain multiple records for the same Contact).
@_Mayank wrote:
2- How to revoke portal access to users, from CRM. If someone accesses the portal from Azure ad b2c I want to remove those users from my portal. How can I achieve this
If all you want to do is stop the user logging in to the portal, then there is a field something like Login Enabled on the Contact record, all you need to do is set it No or uncheck it. (this does not stop the user logging into to B2C, just removes access to the Portal).
Similar to above, can delete the External Identity record in Dataverse - but this just removes the link between the Contact and Identity Provider.
To disable/delete the user in B2C, there is no mechanism from within Dataverse. To do this you would get your admin to update the B2C or create something (Flow, Custom Workflow Activity etc) to do it by making use of the Graph API.
Fubar
69
Super User 2025 Season 1
oliver.rodrigues
49
Most Valuable Professional
Jon Unzueta
43