Power Pages Authentication For Azure AD

Question

Power Pages Authentication For Azure AD

Sourav 130

Hello,

We want to use Power Pages to develop a platform for business users ( external organisation who dont have an account with us) to complete a survey and expose externally.

We are looking to authenticate existing users and new users both. What solution in AD can helping doing that ?

AD B2B / B2C ?
1. Do we need a separate tenant ?
3.Do we need to create an app registration ? Is there a way we can export existing users or new users to authenticate and only users that are included has the ability to complete the survey ? 4.How to ensure highest security - that's highly important.
1. How to achieve this in clear step, please dont provide- chat gpt response.
Cost for implementing the solution - How to calculate. Any license required ?

2 answers

Your answer

Answer 1

Marti Peig 965 Microsoft Employee

Hi @Sourav

Thanks for posting in Microsoft Q&A. In your scenario Azure B2C is the preferred option. B2B is intended for collaboration with other organizations you have some sort of relationship (like partners, vendors, or business units within an Corp. or large enterprise), and their identities live in your tenant having some sort of permissions. Instead Azure B2C is what we call an external tenant, completely isolated from your workforce tenant, and therefore more secure to share with customers of yours.

For the step-by-step you have it well documented in Set up an OpenID Connect provider with Azure AD B2C . Azure B2C pricing model is detailed in Billing model for Azure Active Directory B2C.

Please let me know if you have additional questions, and as usual, if this answers your question, do click Accept Answer and Yes for what if this answer was helpful. And, if you have any further queries do let us know.

Cheers

Sourav 130 Reputation points

2025-02-04T22:10:07.9066667+00:00

Hi @Marti Peig Thanks for response,

Is AD B2C suitable for external corporate accounts be they have azure, Microsoft or other account but not social media account ? In the user flow how can we customize that user can only login from specific ids that are already imported in AD App registration. We may or may not like to have user to allow signup.

Is it ok to use separate tenant for the requirement ?
Sourav 130 Reputation points

2025-02-04T22:16:04.8133333+00:00

Hi @Marti Peig

Thanks for response.

Should we create a separate tenant for AD B2C ?

We want to limit access for users for only imported users to app registration. We only want business customer accounts to login, we might not include any random user to sign up for the power page or application but from legitimate email ids.

Are there cost for each user - how it is going to be charge in terms of license if any for these external users are required ?
Marti Peig 965 Reputation points Microsoft Employee

2025-02-05T13:37:15.0633333+00:00

Hi @Sourav

Azure B2C is in fact a separate tenant connected to your subscription. No need to create any additional workforce tenant if that is what you were meaning by a separate tenant. Check Tutorial: Create an Azure Active Directory B2C tenant.

There are costs per user. Azure Active Directory B2C (Azure AD B2C) pricing is based on monthly active users (MAU), which is the count of unique users with authentication activity within a calendar month. It is all detailed in Billing model for Azure Active Directory B2C.

Cheers
Marti Peig 965 Reputation points Microsoft Employee

2025-02-05T13:42:52.1933333+00:00

Hi again @Sourav ,

Yes, Azure B2C is intended to any business or individual who wishes to authenticate end users to their web or mobile applications using a white-label authentication solution. I recommend you to check Accounts in Azure B2C, and specifically the Consumer Accounts

Cheers
Givary-MSFT 35,456 Reputation points Microsoft Employee

2025-02-10T09:36:31.0566667+00:00

@Sourav Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Janaki Kota 790 Reputation points Microsoft External Staff

2025-02-11T11:51:00.73+00:00

Hello @Sourav,

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

Answer 2

Nivetha Janagaraj 0

Check out detailed blog on this topic https://www.sharepointdesigns.com/blog/a-step-by-step-process-to-integrate-azure-ad-for-secure-power-pages-authentication I

Feel free to reach out if you have any additional questions! If this response addressed your query, kindly click Accept Answer and select Yes if you found it helpful. And as always, let us know if you need any further assistance.

Share via

Power Pages Authentication For Azure AD

2 answers

Your answer