Gain visibility into your custom policies and assess readiness for Microsoft Entra External ID in minutes.
Migration planning starts with visibility
One of the first challenges organizations face when planning a migration from Azure AD B2C to Microsoft Entra External ID is understanding exactly what is implemented in their tenant today.
Over time, Azure AD B2C deployments often grow to include custom user journeys, federation integrations, claims transformations, API connections, and tailored sign-up and sign-in experiences. As teams change and solutions evolve, assessing migration scope can become time-consuming and complex.
To help organizations accelerate migration planning, the Migration Policy Analyzer is now Generally Available (GA). This capability analyzes your Azure AD B2C custom policies and generates a structured assessment of the authentication features implemented, reducing the manual effort and guesswork that typically slow down early migration planning.
The resulting report helps architects and technical decision-makers understand migration readiness, identify implementation gaps, and prioritize next steps.
Understand your current implementation
Available through the Identity Experience Framework experience in Azure AD B2C, Migration Policy Analyzer performs a deterministic analysis of custom policy definitions. It is important to note that the analysis is scoped to the Azure AD B2C custom policies within IEF; it is not a full tenant-wide scan and produces an inventory of the authentication capabilities implemented in those policies.
The assessment provides guidance on:
- Authentication features detected in custom policies
- Migration paths to Microsoft Entra External ID
- Scenarios that may require custom development
- Areas where an alternative architectural approach may be recommended
Rather than manually reviewing policy files, teams receive a structured assessment that can serve as a starting point for migration planning and technical discovery.
Generate a migration assessment in three steps
Getting started requires no policy modifications or additional configuration:
- Open the Identity Experience Framework in your Azure AD B2C tenant.
- Select a policy and click on Analyze policy to begin policy analysis.
- Review and download the generated migration assessment report.
The analyzer scans your custom policy definitions and produces a report that can be shared across engineering, architecture, and business stakeholders.
See Migration Policy Analyzer in action
Migration Policy Analyzer analyzes Azure AD B2C custom policies and generates a migration assessment to help organizations plan their move to Microsoft Entra External ID.
The Migration Policy Analyzer analyzes Azure AD B2C custom policies and generates a migration assessment to help organizations plan their move to Microsoft Entra External ID.
Understand migration readiness
Each detected capability is categorized to help organizations evaluate migration complexity and planning requirements:
- Available - Capabilities that can be implemented using existing Microsoft Entra External ID functionality, including common sign-up and sign-in experiences, federation scenarios, verification workflows, and account recovery experiences.
- Requires Custom Development - Capabilities that may require extensibility mechanisms, API integrations, partner-developed solutions, or additional application logic.
- Architecture Change Recommended- Scenarios that may be better served by a different implementation pattern in Microsoft Entra External ID.
- Not Currently Supported- Capabilities that do not currently have a direct implementation path and may require alternative approaches or future evaluation.
For example, a policy that combines social identity federation, REST API claims enrichment, and a custom password reset flow might be categorized as Available for the federation and password reset experiences and Requires Custom Development for the REST API claims enrichment, giving you an immediate sense of where effort will be concentrated.
For each finding, the report provides migration guidance and recommended next steps to support planning discussions.
Turn discovery into a migration plan
The value of the Migration Policy Analyzer extends beyond identifying features; it helps you move from discovery to an actionable plan while reducing migration risk and effort. With a categorized inventory in hand, teams can:
- Estimate migration scope and effort
- Prioritize proof-of-concept activities
- Highlight areas requiring redesign or additional development
- Build a phased migration strategy
By establishing a shared understanding of the current state, architects, developers, and business stakeholders can align on migration priorities before implementation begins.
Get started
If you are evaluating a transition from Azure AD B2C to Microsoft Entra External ID, migration planning starts with understanding what is deployed today.
Use the Migration Policy Analyzer to:
- Generate an inventory of custom policy capabilities
- Understand migration readiness
- Identify scenarios requiring additional planning
- Evaluate areas that may require redesign or custom development
- Begin building your migration strategy
Open your Azure AD B2C tenant, navigate to Identity Experience Framework, and run an analysis to generate your migration assessment. In minutes, you'll have the visibility needed to move from assessment to action, with less manual effort and lower migration risk.
The Migration Policy Analyzer provides the visibility needed to move from assessment to action.
-Namita Singh
Additional resources
- Analyze Azure AD B2C custom policies for Microsoft Entra External ID migration
- Plan your migration from Azure AD B2C to External ID
- Identity Experience Framework
- Microsoft Entra External ID documentation
- Transition to Microsoft Entra External ID for CIAM
Learn more about Microsoft Entra
Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds.
Microsoft