我有一个使用AD B2C进行身份验证的应用程序。我需要允许外部IDP通过SSO通过AD B2C进行身份验证。我遵循了本文档中的步骤，它对一个IDP效果很好。 https://learn.microsoft.com/en-us/azure/active-directory-b2c/indentity-provider-generic-generic-saml?tabs = macos&pivots = b2c-custompolicy-policy-policy-policy-policy
my用例需要设置多个（＆gt; 30）IDP，不幸的是，此文档需要为每个IDP设置创建新的索赔提供商和技术配置文件。有没有办法在不将其编码为自定义策略的情况下设置多个IDP？沿着基于电子邮件域并将其注入技术配置文件的外部数据源的动态从外部数据源中移动的路线？还是通过设置单个IDP或桥并将其用作30+ IDP的代理？我很好奇别人如何解决这个问题，因为我敢肯定这不是一个新的用例。
I have an application that uses AD B2C for authentication. I need to allow external IdPs to authenticate via SSO into my application via AD B2C. I followed the steps in this documentation and it worked well for one IdP. https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-generic-saml?tabs=macos&pivots=b2c-custom-policy
My use case requires setting up multiple (>30) IdPs and unfortunately this documentation requires creating a new claims provider and technical profile for each IdP set up. Is there a way to set up multiple IdPs without coding them into the custom policy? Along the lines of dynamically pulling the correct IdP from an external data source based on email domain and injecting it into technical profile? Or maybe by setting up a single IdP or bridge and using it as proxy for the 30+ IdPs? I'm curious as to how others have solved this as I'm sure this is not a new use case.
发布评论
评论（1）
•如果您有多个身份提供商要在Azure AD B2C应用程序中进行配置以进行身份验证，则可以通过参考以下文档链接并将所有社会身份提供者作为给定的所有社交文档链接来配置所有社交帐户身份提供商在此链接中： -
https://learn.microsoft.com/en-us/azure/industry/training-services/microsoft-community-培训/基础架构管理/install-your-platform-Insance/configure-multiple-pauthentications in-a-a-a-single-instance
一次，所有社交身份提供者均配置在Azure AD中的身份验证B2C应用程序，您可以按照以下在此文档链接中所述的多租户Azure广告应用程序配置多个身份提供程序： -
•
根据目前的发展，目前不可能仅配置单个技术配置文件和索赔提供商的多个IDP或设置多个IDP，而无需将其编码为自定义策略。当前，您必须通过输入每个IDP的技术资料并在“自定义策略XML文件”中索赔提供商信息来设置所需的内容。有关更多信息，您一定可以参考评论部分中所述的社区线程，以查看它是否有效： -
• If you have multiple Identity providers to be configured in your Azure AD B2C application for authentication, then you can configure all the social account identity providers at once by referring to the below documentation link and configuring one by one all the social identity providers as given in this link: -
https://learn.microsoft.com/en-us/azure/industry/training-services/microsoft-community-training/infrastructure-management/install-your-platform-instance/configure-multiple-authentications-in-a-single-instance
Once, all the social identity providers are configured for authentication in the Azure AD B2C application, then you can configure multiple identity providers for multi-tenant Azure AD application one by one as per stated below in this documentation link: -
https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-azure-ad-multi-tenant?pivots=b2c-custom-policy
•
As per the present developments, it is currently not possible to configure only a single technical profile and claims provider for multiple IDPs or set up multiple IDPs without coding them into custom policies. Currently, you will have to set up the required by entering every IDP’s technical profile and claims provider information in the custom policy XML file.For more information, you can surely refer to the community thread stated in your comments section to see if it works or not: -
B2C Custom Policy with TP OpenId Connect - IdTokenAudience - MultiApple scenario