SAML SSO from 3rd Party Portal users to React Portal hosted on Azure App Service registered in ADB2C

Hi sureshrajamani23,

here is a more detailed answer to your question, adapted to the specific technologies and use case you mentioned:

Prerequisites:

• An Azure AD B2C tenant
• A React SPA Learner Portal
• An XYZ.com portal that supports SAML-based SSO

Azure AD B2C Configuration:

1. Sign in to the Azure portal and navigate to your Azure AD B2C tenant.
2. Under User attributes, collect and store the User Attributes you need to synchronize between XYZ.com and your Learner Portal. You may need to contact your XYZ.com administrator to obtain these attributes.
3. Under Identity providers, set up SAML-based authentication and configure your SAML identity provider. You may need to collect the metadata or configuration details from XYZ.com's SAML configuration.
4. Configure a custom policy in ADB2C that specifies how SAML authentication should be handled. You can use the built-in SAML policy as a starting point.

Learner Portal Configuration:

1. Update your React SPA Learner Portal to use the SAML-based authentication flow provided by Azure AD B2C. You can use the Azure AD B2C SDK for React to simplify this process.
2. In your application, you'll need to configure SAML-based authentication settings, including the identity provider's metadata or configuration details.
3. Ensure that your application can handle the user attributes synchronized from XYZ.com via SAML.

Integration with XYZ.com:

1. To enable SSO from XYZ.com to your Learner Portal, you need to set up a link or button on the XYZ.com portal that initiates the SAML SSO process.
2. In XYZ.com, create a link or button that directs users to your Learner Portal's SSO endpoint. This link should include the SAML RelayState parameter, which will tell Azure AD B2C where to redirect the user after they have successfully authenticated.
3. You may also need to configure XYZ.com to trust the SAML assertions that are issued by Azure AD B2C.

Testing:

1. Test the SSO flow thoroughly to ensure that users who are already logged in on XYZ.com are seamlessly logged into your Learner Portal without needing to enter their credentials again.
2. You can use the Azure AD B2C Test Lab to simulate the SSO flow and troubleshoot any issues.

User Data Synchronization:

1. Ensure that user data synchronized from XYZ.com to your Learner Portal is accurate and secure. You may need to map attributes between the two systems to maintain consistency.
2. You can use the Azure AD B2C User Sync feature to automate the synchronization of user data.