web

You’re offline. This is a read only version of the page.

News and Announcements icon

Power Platform CommunityForums Power Pages Azure AD B2C authentic...

Power Pages

Answered

Azure AD B2C authentication

(1) Share

Report

Report

Posted on by CU22052033-0

10

My Power Pages Sites uses Azure AD B2C for authentication. I would like to know how a B2C identity matches a Dynamics Contact. I found a very good blog: https://community.dynamics.com/blogs/post/?postid=1dd4444c-2602-4600-b34e-736b2be52b75. It said the matching is between the email claim in the B2C token and the email in the contact's "primary email address" field.

First, I cannot find the "primary email address" field of the contact. Would it be emailaddress1 instead? I deliberately changed the emailaddress1 to something else, yet I can still sign in with the same B2C identity.

Categories:

I have the same question (0)

All responses Img

All responses (1)

Answers Img

Answers (1)

Verified answer

Fubar 8,487 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

'Primary email address' would be emailaddress1, however once the Contact record is associated with an External Identity Provider (such as B2C) the link between the Identity Provider and the Contact record is the identifier from the Identity Provider (in the case of B2C this is the guid of the B2C user) this linkage is stored in the External Identity table which is linked to the Contact (it is not the email address of the Contact).

Note: (except for local authentication) you are not really logging in to Power Pages, you are logging into the Identity Provider, and Power Pages is trusting that Identity Provider.

Where this is being described in the article is primarily about moving a Contact that was setup using Local Authentication and then moving to B2C (but part would also apply to where you have an existing Contact created and no authentication setup).

Where you are referring to in the article you linked to unfortunately is not 100% clear on what they are doing. The scenario in the article is relating to having an existing Contact and having it map to the B2C when the users B2C is originally setup - this is also not the default behavior and requires a setting on the identity provider setup in Power Pages see "contact mapping with email"

https://learn.microsoft.com/en-us/power-pages/security/authentication/azure-ad-b2c-provider#additional-settings-in-power-pages

Was this reply helpful? Yes No

Join the conversation

Helpful resources

News and Announcements

Welcome to the Power Platform Communities

Quick Links

Subscribe to this forum!

Stay up to date on forum activity by subscribing.

Leaderboard > Power Pages

#1

#2

#3

oliver.rodrigues 33 Most Valuable Professional

Last 30 days Overall leaderboard

Featured topics

Solution to LinkedIn Authentication in Power Apps Portals

Welcome to the Power Pages forum!

Product updates

Microsoft Power Platform Community release plans