Search code examples
azuresingle-sign-onopenidazure-ad-b2c

Azure B2C SSO configuration options differences


I'm trying to set up the Azure B2C Tenant to provide SSO authentication but I can't figure out what are the differences between the available options:

SSO azure b2c options


Solution

  • I think if you set it to tenant then once a user is signed into one app then they can do a silent log in to any other app on the tenant.

    So if you had

    app1 and app2 in same tenant

    app1 open in tab1 and app2 in tab2 logging into app1 would mean that when you clicked login on app2 then it would do a silent login

    application - restricts this to a single application but you can log in to the app on multiple tabs within the same browser.

    policy - restricts it further so you would have to call the same policy, so if you had policy login1 and policy login2 then you you only get auto signin if you call the same policy

    Disabled - you dont get single sign on