Search code examples
azureazure-active-directoryazure-ad-msalazure-authentication

Azure AD One User Principal with multiple Identity Providers


I use MSAL.js to authenticate to Azure AD. For some users with email addresses matching a specific domain name, Azure AD redirects them to a third-party Identity Provider (IDP) where they can authenticate before being redirected to my application.

It appears that from time to time the third-party IDP is not responding (known issue that affects all applications of my client apparently). Is it possible in this case to fallback to Azure AD as the IDP ?

In other words, is it possible to have multiple IDPs for a single User Principal ?


Solution

  • For an external user object in Azure AD there can be only one external IdP. Currently there is no fallback mechanism for the scenario you are looking for.