Microsoft security Best practices for Azure B2C integration with Dynamics 365

Hi Community,

Our customer has Dynamics 365 environment (Being managed by third party provider) and B2C integration with their Azure AD. They’re currently focusing on the potential risks and mitigations of the current configuration.

Plan:

• They’d like to assess the current Azure B2C Directories against Microsoft security best practices
• They’d like to perform a gap analysis and report on any recommended changes to the security configuration

Question:

1. What is the recommended approach to achieve the above plan?

2. The important ask is how can we advise them like, these are the things you should have enabled in the portal, or these are things you should monitor?

Any pointers would be of great help.