0

I am using Azure B2C to connect my own openid connect server using OpenID onnect (Preview) provider. I configured every thing, system is working fine.

But one thing is when a new user logs in through my own openid connect server, Azure AD B2C creates this user in Azure AD which is connected to Azure B2C.

My intention is that, My client application has to call Azure B2C. Azure B2C should display list of identity providers. one among those providers is my own openid connect server. Then user can input his credential in my own openid connect server and verified and return back to Azure B2C with id_token. after this step Azure AD B2C is asking me to create this user in Azure AD. why this is happening ?

I cannot provide my user details to any intermediate systems. Please help me on this.

The same scenario is happening for gmail users also. but only first time login or when we change some signin policy attributes.

Wayne Yang
  • 9,016
  • 2
  • 20
  • 40
Vetrivel mp
  • 1,214
  • 1
  • 14
  • 29
  • Are you wanting to allow for local (AzureAD-based with password stored by AAD) accounts as well as externally authenticated accounts, or ONLY externally authenticated accounts (your OIDC, Google, etc.)? – M Herbener May 25 '18 at 12:26
  • Hello, as of now only external users authenticated. So our intention is that those external user information should not store inside AAD – Vetrivel mp May 26 '18 at 14:19

1 Answers1

1

Based on my experience, even for externally authenticated users (social sign-in) AAD B2C always creates an object in its local store (which is actually an Azure AD directory). I can't speak authoritatively, but a couple of reasons for this would be 1) the ability to generate and maintain an immutable ID for a user that is somewhat independent of the social IdP, and 2) the ability to collect and store additional attributes which are not available from the social IdP.

I believe you can make the process invisible to your users - they don't necessarily have to be prompted to enter additional attributes or to create a user - but it will still happen in the background.

M Herbener
  • 584
  • 3
  • 18
  • Hello Herbener, Could you tell me or give some links how to make user creation part invisible without prompted to user – Vetrivel mp Jul 05 '18 at 05:59