Auth - Which auth service is being used behind the Microsoft Auth Provider?

[JeremyQtweb]

Hey team,

We've been testing the new Microsoft Entra External ID (EEID) service, their replacement for Azure AD B2C.

Presumably the Supabase Auth - Microsoft Provider is one of those services.

Can I confirm with someone if that is true, and which one the Microsoft Provider is using?

[ssudaraka]

Hi @JeremyQtweb,

Microsoft Entra is just a new rebranding of Azure AD. The features and the infrastructure around the product are the same. You can use Entra as a Supabase auth provider.

[JeremyQtweb]

Hi @ssudaraka ,

Unfortunately for us this is now a Production issue, so I'm following up to see if you've had a chance to confirm my suspicion and determine if there are any plans to address it?

Thanks for your assistance.

[ssudaraka]

Hi @JeremyQtweb,

I apologize for the extremely delayed response; I was away most of the last month.

I tried to sign up for a Microsoft Entra ID P2 tenant to test this behavior, but the endpoints it's giving me for integrating auth has the microsoftonline.com domain. Can you tell me more about how to obtain ciamlogin.com URLs for Entra ID applications?

Also, you can use SAML with your Entra ID tenant if it doesn't work with OAuth. Maybe that will help?

[JeremyQtweb]

Hi @ssudaraka ,

Entra ID is a "internal use only product".

Azure AD B2C is an "external product" which has recently been superseded by Entra External ID. AADB2C has been sunset, will remain in production for ~5 years they say, but its not "the future" so it will receive no more development or support from MS - and "most new installs of external MS directories" will be Entra External ID.

Entra External ID for Customers (an external product) works a bit like AADB2C with the key difference being the URLs and the claim/access tokens used.

[JeremyQtweb]

Bump

[akarray]

Any plan ?
EEID is a game changer !

[hf]

These are the issuers supported currently. https://github.com/supabase/auth/blob/master/internal/api/provider/azure.go#L16-L42

Please link to documentation from Microsoft about this new system they have, as a quick search online doesn't yield any meaningful tech documentation. Just marketing word salad.

Contributions to the Auth repo are welcome!

[JeremyQtweb]

Hi @hf ,

Thank you for responding.

Microsoft has a dedicated section for External Entra ID documentation.

Code examples for EEID are available too.

Cheers,
Jeremy

[hf]

Can't you do this by specifying the CIAM URL here in Azure Tenant? That's what the code supports today.