Zum Hauptinhalt springen

Add Azure AD B2C as an OAuth provider

This guide explains how to let users sign in to Casdoor with their account in Azure AD B2C, the customer identity platform of Microsoft.

Learning outcomes​

  • Register an application in an Azure AD B2C tenant.
  • Add Azure AD B2C as an OAuth provider in Casdoor.

What you need​

  • An Azure subscription
  • Administrator access to the Casdoor admin console

Configure Azure AD B2C​

  1. Create a B2C tenant in the Azure portal.

  2. Register an application in the B2C tenant and note the Application (client) ID.

    Application registration

  3. Create a client secret and copy its value. Azure shows the value only once.

    Client secret of the application

  4. Add the callback URL of Casdoor, https://<your-casdoor-host>/callback, to the Redirect URIs of the application.

    Redirect URIs of the application

  5. Define the user flows that you need, for sign-up, sign-in, and profile editing.

Add the provider in Casdoor​

  1. In the Casdoor admin console, go to Identity > Providers and add a provider.

  2. Set Category to OAuth and Type to Azure AD B2C.

  3. Enter the Client ID and the Client secret of the B2C application.

    Azure AD B2C provider in Casdoor

  4. Save the provider.

To fill in more user fields from the claims of your user flows, see Map OAuth claims to user fields.

Next steps​

Add the provider to an application. See Add providers to an application.

See also​