Marius Rochon Archives | Developer Support

To B2B or to B2C?

Developer Support March 25, 2021 Mar 25, 2021 03/25/21

While one uses B to signify it’s focus on business partnerships, while the other uses C for consumers, at the end of the day either can be used to accomplish roughly the same access. My intent here is to focus on what I see as the fundamental difference; one that is most likely to drive the appropriate choice of technology.

Setting up for Azure B2C development

Developer Support January 11, 2021 Jan 11, 2021 01/11/21

The following describes some techniques, tools and approaches I found useful when developing applications with Azure AD B2C. The first part deals with setting up a newly created B2C tenant using the Azure portal only. The second part deals with developing custom journeys (Identity Experience Framework) xml policies.

B2C Identity Experience Framework – getting started

Developer Support April 11, 2020 Apr 11, 2020 04/11/20

This sample configures an existing B2C tenant for use with Identity Experience Framework custom policies. It performs all tasks defined in the getting started document except creating a Facebook signing key required by some starter policies.

Using B2C to support multi-tenant SaaS apps

Developer Support February 17, 2020 Feb 17, 2020 02/17/20

AAD multi-tenancy is ideal for medium-to-large enterprises who own and manage their own identity infrastructure. This sample is for small enterprises, usually without their own identity infrastructure. It provides support for an application that needs to group it's users into discrete groups, each representing an application tenant.

Unseen secrets – using KeyVault to protect OAuth2 token requests

Developer Support February 12, 2020 Feb 12, 2020 02/12/20

This sample implements an Azure Function App, which uses Azure KeyVault to sign OAuth2 client assertions used to obtain JWT tokens from Azure AD. The private key used to sign the client assertion and thus authenticate the function to Azure AD is generated in the KeyVault and never leaves that service (it is not exportable).

PowerShell to upload IEF policies to multiple B2C tenants

Developer Support February 12, 2020 Feb 12, 2020 02/12/20

Premier Dev Consultant Marius Rochon shares an example of a PowerShell script to upload a set of B2C IEF policies to one or more B2C tenants.

Choosing the OAuth2 grant flow

Developer Support June 17, 2019 Jun 17, 2019 06/17/19

Premier Dev Consultant Marius Rochon explores OAuth2 questions you need to ask and how the answers lead to the selection of the grant. The OAuth2 specifications define six different grant types (https://tools.ietf.org/html/rfc6749 and https://tools.ietf.org/html/draft-ietf-oauth-device-flow-15). Each provides the most optimal (from the ...

Multi-Tenant Applications and Azure AD

Developer Support May 7, 2018 May 7, 2018 05/7/18

Following up on a previous blog post, Premier Developer Consultant Marius Rochon describes recent changes and compares the use of Azure AD multi-tenant features with the custom features in B2C.Read Marius’s first post here.Since then, there have been some changes to the demo application regarding new modes and new features. In his follow-up ...

Developing an Azure AD B2C multi-tenant application

Pam Lahoud October 9, 2017 Oct 9, 2017 10/9/17

In this post from his blog, Premier Developer consultant Marius Rochon provides a demo application that illustrates how to use Azure Active Directory B2C for authentication in a multi-tenant application.The 'regular' Azure AD has build-in support for multi-tenant applications. In that case, a user from any Azure AD tenant can sign in to an ...

Claims augmentation with OWIN but outside of Startup code

Pam Lahoud August 16, 2017 Aug 16, 2017 08/16/17

This post on authentication and authorization is from Premier Developer consultant Marius Rochon.Claims list included in the ClaimsPrincipal usually originate from the security token received by the application as part of user authentication (SAML, OpenIDConnect id token) or access authorization (OAuth2 bearer access token). However, ...

Developer Support