This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 64%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJD%3C/text%3E%3C/svg%3E)
I'm looking for Entra External ID procedures to validate user credentials on external IDP at sign -in time.
This is for user migration procedures similar to what is explained in B2C docs: https://learn.microsoft.com/en-us/azure/active-directory-b2c/user-migration
Can you tell me if that JIT password verification/user migration is possible with Entra External ID and its custom authentication extensions?
Many thanks,
JD
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 68%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKS%3C/text%3E%3C/svg%3E)
Hi juni dev,
Thank you for posting your query on Microsoft Q&A. I am Saiteja from Q&A will be assisting you with your query.
As per your query, I understand you would like to have a migration approach in external ID and like to know the possibilities of JIT password verification as similar as B2C.
Currently External Entra ID is still emerging, and our team is working on it to provide the best features in nearby future. Right now, we do not have a feature for JIT password verification in External Entra ID in any possible ways. You can always what's new in External Entra ID using the following link: https://learn.microsoft.com/en-us/entra/external-id/customers/whats-new-docs
I hope this information is helpful. Please feel free to reach out if you have any further questions.
If the answer is helpful, please click "Accept Answer" and kindly "upvote it". If you have extra questions about this answer, please click "Comment".
Hi juni dev,
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Hi juni dev,
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Thank you Kancharla Saiteja,
Can you please also indicate about the following:
-Is it possible to configure the password complexity and how?
-Is it possible to configure the lifetime of tokens and how?
-Is it possible to configure the sessions lifetime and how?
-Does the user flow exposes an OIDC discovery endpoint like in B2C IEF custom policies?
-How to call a logout? Any logout endpoint?
-The UI customizations is only via portal and custom css file or is it possible to add javascript in anyway?
Help is really appreciated.
Thank you,
JD