---
title: "SSO: Azure Active Directory B2C"
slug: "sso-azure-active-directory-b2c"
tags: ["single sign-on"]
updated: 2026-01-08T15:40:44Z
published: 2026-01-08T15:40:44Z
canonical: "support.smarteru.com/sso-azure-active-directory-b2c"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.smarteru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO: Azure Active Directory B2C

The steps below assume that you already have an [Azure Active Directory B2C tenant](https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications.). As of May 1, 2025, Microsoft no longer allows Azure AD B2C tenants to be purchased.

These steps enable you to integrate Azure Active Directory (AD) B2C using OpenID. Azure AD B2C allows you to use social providers such as Google, Facebook, and your organization's email for single sign-on (SSO).

If you want to allow SSO with Azure Active Directory using SAML, refer to [Setting Up Azure Active Directory with SmarterU](/v1/docs/sso-azure-active-directory). 

To set up Azure Active Directory B2C with SmarterU:

1. Complete the following steps in Azure Active Directory B2C:
  1. [Register a new application.](/v1/docs/sso-azure-active-directory-b2c#registering-a-new-application-in-azure)
  2. [Create a sign-in user flow.](/v1/docs/sso-azure-active-directory-b2c#creating-a-signin-user-flow)
  3. [Create an identity provider.](/v1/docs/sso-azure-active-directory-b2c#creating-an-identify-provider)
  4. [Determine the application ID and issuer.](/v1/docs/sso-azure-active-directory-b2c#determining-the-application-id-and-issuer)
2. [Configure Azure AD B2C OpenID in SmarterU.](/v1/docs/sso-azure-active-directory-b2c#configuring-azure-ad-b2c-in-smarteru)

## Registering a New Application in Azure

To register a new application in your Azure tenant, follow the steps detailed here: [https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications.](https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications.)

In step 7, use the following address as the endpoint:

```markup
https://integrations.smarteru.com/Integrations/ADB2C/
```

This endpoint was created to handle requests and will be used for authentication before logging users into SmarterU.

Be sure to make note of the client ID and secret key as you'll need them in a later step.

**NEXT STEP:** [Create a sign-in user flow.](/v1/docs/sso-azure-active-directory-b2c#creating-a-signin-user-flow)

## Creating a Sign-In User Flow

To create a sign-in user flow in Azure, follow the steps detailed here: [https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows](https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows).

In step 8 of the [Create a Sign-Up and Sign-In User Flow section](https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows#create-a-sign-up-and-sign-in-user-flow), check the following attributes and claims:

|  | Collect Attribute | Return Claim |
| --- | --- | --- |
| **Display Name** | ✔ | ✔ |
| **Email Address** | ✔ | ✔ |
| **Given Name** | ✔ | ✔ |
| **Identity Provider Access Token** |  | ✔ |
| **Surname** | ✔ | ✔ |
| **User is New** |  | ✔ |
| **User's Object ID** |  | ✔ |

**NEXT STEP:** [Create an identity provider.](/v1/docs/sso-azure-active-directory-b2c#creating-an-identify-provider)

## Creating an Identify Provider

To create the identity provider in Azure, follow the steps detailed here: [https://docs.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-generic-openid-connect](https://docs.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-generic-openid-connect).

You'll need to have the client ID and secret key from the [Registering a New Application in Azure](/v1/docs/sso-azure-active-directory-b2c#registering-a-new-application-in-azure) section.

**NEXT STEP:** [Determine the application ID and issuer.](/v1/docs/sso-azure-active-directory-b2c#determining-the-application-id-and-issuer)

## Determining the Application ID and Issuer

In this part of the process you'll determine the application ID and issuer that are needed in the next section (i.e., [Configuring Azure AD B2C in SmarterU](/v1/docs/sso-azure-active-directory-b2c#configuring-azure-ad-b2c-in-smarteru)).

To determine the application identifier and issuer in Azure:

1. From the Home > Azure AD B2C page, select Applications. The application ID displays in the right panel.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Azure%20B2C%20-%20Application%20ID%2020220202.png)

1. From the Home > Azure AD B2C page, select User Flows.
2. Select the sign-in user flow that you created in the [Creating a Sign-In User Flow](/v1/docs/sso-azure-active-directory-b2c#creating-a-signin-user-flow) section.
3. Click Run User Flow.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Azure%20B2C%20-%20Run%20User%20Flow%2020220202.png)

A panel displays on the right.

1. Click the link that's displayed at the top of the panel.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Azure%20B2C%20-%20Run%20User%20Flow%20Panel%20Link%2020220202.png)

The issuer displays.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Azure%20B2C%20-%20Issuer%2020220202.png)

**NEXT STEP:** [Configure Azure AD B2C in SmarterU.](/v1/docs/sso-azure-active-directory-b2c#configuring-azure-ad-b2c-in-smarteru)

## Configuring Azure AD B2C in SmarterU

To set up Azure Active Directory with SmarterU:

1. [Enable external authorization](https://support.smarteru.com/v1/docs/account-external-authorization-sso#enable-external-authorization) for your SmarterU account.
2. Select **Enable External Authorization**.
3. Expand the Azure AD B2C OpenID section.

![Graphical user interface Description automatically generated with medium confidence](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/sso-azure-active-directory-b2c-image-7nw9m6h3.png)

1. Specify the following settings:

| Setting | Value |
| --- | --- |
| **Enable Azure AD B2C OpenID** | Check to enable Azure Active Directory for SmarterU. |
| **Application Identifier** | Enter the application ID from the [Determining the Application ID and Issuer](/v1/docs/sso-azure-active-directory-b2c#determining-the-application-id-and-issuer) section. |
| **Issuer** | Enter the issuer from the [Determining the Application ID and Issuer](/v1/docs/sso-azure-active-directory-b2c#determining-the-application-id-and-issuer) section. |

1. Click **Save**.

## Troubleshooting

If your users are having trouble logging in, refer to our [Troubleshooting User Accounts](/v1/docs/troubleshooting-user-accounts) page for common issues.

## Related

- [Account: External Authorization (SSO)](/account-external-authorization-sso.md)
- [Editing Your Account Settings](/editing-your-account-settings.md)
- [SSO: Microsoft Entra ID](/sso-microsoft-entra-id.md)