Blog Post

Microsoft Entra Blog
4 MIN READ

Evolve your CIAM strategy with External ID

AnkurPatel's avatar
AnkurPatel
Icon for Microsoft rankMicrosoft
Jun 27, 2024

Last month we announced the general availability of our next generation customer identity and access management solution, Microsoft Entra External ID. External ID makes Customer Identity & Access Management (CIAM) secure and simple by enabling you to:  

 

  • Secure all external identities: Managing several disparate solutions can overcomplicate your security strategy. By adopting External ID as your CIAM solution, you can secure all identity types within your Microsoft Entra admin center, safeguarding all external identities with industry-leading security, including our own conditional access engine, verifiable credentials, and built-in identity governance.  
  • Create frictionless user experiences: The rise of fraud, GenAI, and identity attacks has increased end-user fear when it comes to security risks online. With External ID, you can build frictionless, branded, user centric interfaces into your web and mobile applications to increase brand awareness, build user trust and drive user engagement. Check out an example in the WoodGrove Groceries demo! 
  • Streamline secure collaboration: Collaborating with external users and ensuring they have the right access at the right time is complex. Simplify collaboration by inviting business guests with External ID and defining what internal resources they can access across SharePoint, Teams, and OneDrive.  
  • Accelerate the development of secure applications: Integrating robust and extensive user flows into apps can take developers months. Shorten development time to minutes by leveraging External ID’s rich set of APIs, SDKs, and integrations with developer tools, such as Visual Studio Code, to build secure and branded identity experiences into external-facing web and mobile apps. 
  • Best in class value at scale: Managing several security stacks can be costly. External ID brings innovative CIAM features at a cost-effective value for any growing customer without compromising on scalable, end-to-end security. For example, this approach helps us bring best-in-class identity verification like Face Check with Verified ID to reduce help desk costs for combatting fraud. Learn more about External ID pricing here. 

 

Our goal is to provide best in class protection from bot attacks, sign in and signup fraud and ability to audit every step of external user’s journeys

 

Ask Me Anything (AMA) on July 16 for a deep dive into External ID!  

 

Since our GA announcement, we’ve received lots of interest from customers who want to get started with External ID. Don't miss our live Ask Me Anything webinar on July 16, 2024, at 9am PST! Register online to join our product experts as they showcase live demos to show how External ID shortens the implementation of secure end-to-end identity experiences into external-facing apps from months to minutes.   

 

In our AMA event, we’ll also reserve time to address any FAQs you may have about External ID, Azure AD B2C, Azure AD B2B, and more. You can find most of these questions in public documentation and in your tenant administration portal. We also collected some here for convenience: 

 

I am currently using Azure AD B2C, how can I take advantage of the innovation in Microsoft Entra External ID?  

By building new applications with Microsoft Entra External ID, admins and developers can lean on familiar Microsoft Entra ID experiences while avoiding the overhead of building specific skills in Azure AD B2C technology. Powered by open standards, External ID is built to be interoperable with any Identity solution to provide enterprise-grade security without sacrificing end user experiences. Learn more. 

 

While Azure AD B2C is powerful in the flexibility of experiences it enables, External ID is designed for ease of adoption and speed of innovation as it’s converged into the Entra ID technical stack and organically benefits from all Entra ID innovation, extending Microsoft Entra industry-leading security and governance to external users.   

 

Will there be any changes in Azure AD B2C support and how can I migrate my existing Azure AD B2C applications to Microsoft Entra External ID? 

Current Azure AD B2C customers can continue using the Azure AD B2C with no service disruptions, including creating new tenants. You can continue to operate your existing B2C applications with confidence and we'll continue supporting you until at least May 2030. 

 

We’re currently developing a seamless migration journey so you can move your existing Azure AD B2C applications to External ID without disrupting your end users and will share more information when ready. If you’d like to participate in early previews, your account team can help enroll you. You may choose to migrate your existing applications when the next-generation platform meets your feature requirements, and migration is right for your business. Learn more in our FAQ. 

 

I am currently using Azure AD B2B collaboration and B2B direct connect, have these experiences changed? 

Azure AD B2B collaboration and B2B direct connect are now part of Microsoft Entra External ID as External ID B2B collaboration and B2B direct connect. There are no changes to your product experience, B2B collaboration features remain in the same location in the Microsoft Entra admin center within the workforce tenant, allowing you to secure all business guests, streamline collaboration, and limit access risks extending ID Governance to external users.   

 

Get started with External ID! 

 

We’re excited to share the new External ID platform with you and help you deliver seamless and secure experiences to your end-users. If you are interested in learning more about External ID and how it can help secure your applications, visit aka.ms/External_ID to get started. You can try External ID for free and only pay for what you use, learn more about pricing here.  

 

 

 

  

 

Ankur Patel runs Growth for Identity @ Microsoft. In recent times, he drove the effort for connecting LinkedIn, the world’s leading professional graph and Office 365, the world’s leading productivity graph. Currently, Ankur leads Microsoft’s efforts for Entra Verified ID & External ID to improve security and compliance without compromising on privacy.  

 

 

Read more on this topic 

 

Learn more about Microsoft Entra  

Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds. 

Updated Jul 02, 2024
Version 3.0
  • matthew2440 LucasM840  Thank you for sharing your feedback! We're actively working on addressing many of the issues you've mentioned. Several new features, such as account linking and support for Microsoft Accounts are on our roadmap and will be rolled out in upcoming updates. 


    We apologize for any inconvenience you experienced with our support teams and technical advice sessions. Your feedback is invaluable in helping us prioritize these improvements and ensure consistency in our responses. If you have any specific suggestions or further details, we'd love to hear them.

  • matthew2440's avatar
    matthew2440
    Copper Contributor

    I have to agree with the above comments. I can't imagine anybody willingly adopting this as a solution at the moment. It doesn't even support Microsoft accounts as a 'social' sign in option.

     

    It is a fundamentally flawed product and what makes it worse is that both the documentation and the support teams are about as useful as a chocolate teapot. I had the misfortune of setting up a 'technical advice' session through out Microsoft For Startups sponsorship and the guys there were beyond useless. I accidentally submitted the same request twice and received two totally contradictory responses.

     

    TLDR; Use absolutely anything else other than External ID, there are a dozen really good developer friendly options out there (Clerk for example).

  • LucasM840's avatar
    LucasM840
    Copper Contributor

    It's a trap. Literally anything else is better.

    There is no account linking, no multiple authorities for signing in, the portal is very buggy and several options are disabled. You would be better off using anything else. Support doesn't know anything, they can't respond to basic questions—no developer support. Documentation is lacking a lot. There is no mention of the GraphAPI, but you need it to do anything worthwhile. You CAN NOT have more than one user flow for the same app. No tOTP as a secondary authentication option. You can't sign in with a local account (email/password) and an external IDP at the same time is either/or. Don't do what I did. Don't waste your time.

  • shamprasad_RH's avatar
    shamprasad_RH
    Copper Contributor

    AnkurPatel  This blog is bit misleading, Entra external ID is still preview and not generally available, Please update the post to indicate it correctly.