Power Pages Authentication For Azure AD

Question

Hello,

We want to use Power Pages to develop a platform for business users ( external organisation who dont have an account with us) to complete a survey and expose externally.

We are looking to authenticate existing users and new users both. What solution in AD can helping doing that ?

1. AD B2B / B2C ?
   2. Do we need a separate tenant ?
   3.Do we need to create an app registration ? Is there a way we can export existing users or new users to authenticate and only users that are included has the ability to complete the survey ? 4.How to ensure highest security - that's highly important.
   5. How to achieve this in clear step, please dont provide- chat gpt response.
2. Cost for implementing the solution - How to calculate. Any license required ?

Answer 1

Hi @Sourav

Thanks for posting in Microsoft Q&A. In your scenario Azure B2C is the preferred option. B2B is intended for collaboration with other organizations you have some sort of relationship (like partners, vendors, or business units within an Corp. or large enterprise), and their identities live in your tenant having some sort of permissions. Instead Azure B2C is what we call an external tenant, completely isolated from your workforce tenant, and therefore more secure to share with customers of yours.

For the step-by-step you have it well documented in Set up an OpenID Connect provider with Azure AD B2C . Azure B2C pricing model is detailed in Billing model for Azure Active Directory B2C.

Please let me know if you have additional questions, and as usual, if this answers your question, do click Accept Answer and Yes for what if this answer was helpful. And, if you have any further queries do let us know. 

Cheers

Answer 2

Hi @Marti Peig Thanks for response,

Is AD B2C suitable for external corporate accounts be they have azure, Microsoft or other account but not social media account ? In the user flow how can we customize that user can only login from specific ids that are already imported in AD App registration. We may or may not like to have user to allow signup.

Is it ok to use separate tenant for the requirement ?