web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

Welcome to the Power Platform Communities
News and Announcements icon
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Pages / Moving to Azure AD B2C...
Power Pages
Answered

Moving to Azure AD B2C and keeping old contacts

(0) ShareShare
ReportReport
Posted on by MH-02091453-0 125

Hi,

 

So I have a portal already up and running and am looking to move from local sign in which will soon be deprecated to azure ad b2c.  We currently already have contact assigned to accounts and associated with web roles?  How can I set up b2c and ensure that these contact can login trhough azure with same web roles and assigned to correct account? For new users how do i do this also?  Do we still send out invites and ask users to use the code?  How can new contact become assigned  a webrole and to an account when they login/sign up using azure ad b2c?

Categories:
Security
  • Verified answer
    Fubar Profile Picture
    Fubar 17 Super User 2026 Season 1 on at

    FYI: local login is unlikely to be deprecated any time soon

     

    For Existing users:

    Web Role is attached to the Contact record in Dataverse not B2C.  The B2C does not change Web Role assignment, the B2C adds an External Identity record to the Contact this record holds the URL of the Azure B2C Identity Provider, and the B2C  GUID of their identity in B2C.  You will have to do one of the following

    • Enable "Contact Mapping with Email" mapping when you setup B2C - just be aware that as the email address is the only thing that is used it may not be very secure without something like multifactor authentication etc. to verify the person registering for B2C owns the email address. https://docs.microsoft.com/en-us/power-apps/maker/portals/configure/configure-azure-ad-b2c-provider-manual
    • Write something (can be done in Flow also) that goes over your existing Contacts and creates the B2C account for them in Azure B2C (using the Graph API and then) and then creates the respective External Identity record 
    • Enable B2C and disable local login, and then send them another invitation

     

    New users

    Can still use Invitations, Web Role assignment either via being attached to the Invitation or via realtime workflow/plugin.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Welcome to the Power Platform Communities

Quick Links

Season of Sharing Community Challenge Winners!

Congratulations to our community stars!

Kudos to our 2025 Community Spotlight Honorees

Expanding mentorship, skilling, and AI innovation

Congratulations to the July Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Power Pages

#1
Mohsin Ali Profile Picture

Mohsin Ali 43

#2
sannavajjala87 Profile Picture

sannavajjala87 30 Super User 2026 Season 2

#3
11manish Profile Picture

11manish 20 Super User 2026 Season 2

Last 30 days Overall leaderboard

Featured topics

Solution to LinkedIn Authentication in Power Apps Portals
Welcome to the Power Pages forum!

Product updates

Microsoft Power Platform Community release plans