Azure active directory b2c
Skill MicrosoftDocs/Agent-Skills/skills/azure-active-directory-b2c
Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).From its SKILL.md
npx -y skills add MicrosoftDocs/Agent-Skills --skill azure-active-directory-b2cAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
SKILL.md
42.7 KB, as published. Nobody here has run it
Azure Active Directory B2C Skill
This skill provides expert guidance for Azure Active Directory B2C. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
How to Use This Skill
IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120), useread_filewith the specified lines. For categories with file links (e.g.,[security.md](security.md)), useread_fileon the linked reference file
IMPORTANT for Agent: If
metadata.generated_atis more than 3 months old, suggest the user pull the latest version from the repository. Ifmcp_microsoftdocstools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
- Preferred: Use
mcp_microsoftdocs:microsoft_docs_fetchwith query stringfrom=learn-agent-skill. Returns Markdown. - Fallback: Use
fetch_webpagewith query stringfrom=learn-agent-skill&accept=text/markdown. Returns Markdown.
Category Index
| Category | Lines | Description |
|---|---|---|
| Troubleshooting | L37-L43 | Diagnosing and fixing Azure AD B2C errors, debugging custom policies and user flows, and using Application Insights to trace and troubleshoot policy execution. |
| Best Practices | L44-L52 | Best practices for configuring Azure AD B2C, designing user flows/custom policies, securing MFA and architecture, and detecting/mitigating credential and account attacks. |
| Decision Making | L53-L60 | Guidance on planning Azure AD B2C usage: choosing app types, understanding MAU billing, regions/data residency, retirement impact, and selecting a user migration strategy. |
| Architecture & Design Patterns | L61-L69 | Global Azure AD B2C customer identity architectures, comparing funnel- vs region-based designs, and step-by-step proof-of-concept implementations for each pattern |
| Limits & Quotas | L70-L77 | Service limits, quotas, and restrictions for Azure AD B2C tenants, including directory size, token formats/constraints, and tenant creation and scaling limits. |
| Security | L78-L94 | Security hardening for Azure AD B2C: MFA, Conditional Access, Identity Protection, CAPTCHA, TLS/ciphers, policy keys, admin/tenant access control, API security, and Sentinel-based monitoring. |
| Configuration | L95-L209 | Configuring Azure AD B2C: custom policies, user flows, tokens, MFA, identity providers, claims/transformations, app/API registration, UI/localization, SSO, security, and advanced auth options. |
| Integrations & Coding Patterns | L210-L322 | Patterns and step-by-step guides for integrating Azure AD B2C into apps, securing APIs, configuring IdPs/social logins, custom policies, fraud/risk tools, and routing logs/monitoring. |
| Deployment | L323-L327 | Automating deployment of Azure AD B2C custom policies using CI/CD pipelines, including setup steps, YAML examples, and best practices for Azure Pipelines and GitHub Actions. |
Troubleshooting
| Topic | URL |
|---|---|
| Azure AD B2C error codes and troubleshooting reference | https://learn.microsoft.com/en-us/azure/active-directory-b2c/error-codes |
| Troubleshoot Azure AD B2C custom policies and user flows | https://learn.microsoft.com/en-us/azure/active-directory-b2c/troubleshoot |
| Troubleshoot Azure AD B2C custom policies with Application Insights | https://learn.microsoft.com/en-us/azure/active-directory-b2c/troubleshoot-with-application-insights |
Best Practices
| Topic | URL |
|---|---|
| Apply Azure AD B2C integration and configuration best practices | https://learn.microsoft.com/en-us/azure/active-directory-b2c/best-practices |
| Developer guidance for Azure AD B2C user flows and custom policies | https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-policy-developer-notes |
| Secure phone-based MFA in Azure AD B2C using monitoring and alerts | https://learn.microsoft.com/en-us/azure/active-directory-b2c/phone-based-mfa |
| Apply security best practices to Azure AD B2C architecture | https://learn.microsoft.com/en-us/azure/active-directory-b2c/security-architecture |
| Mitigate credential attacks in Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/threat-management |
Decision Making
| Topic | URL |
|---|---|
| Choose appropriate application types for Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/application-types |
| Understand Azure AD B2C MAU billing and tier selection | https://learn.microsoft.com/en-us/azure/active-directory-b2c/billing |
| Plan Azure AD B2C region availability and data residency | https://learn.microsoft.com/en-us/azure/active-directory-b2c/data-residency |
| Choose a user migration approach to Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/user-migration |
Architecture & Design Patterns
| Topic | URL |
|---|---|
| Apply funnel-based global identity design with Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-funnel-based-design |
| Implement funnel-based global identity proof of concept in Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-proof-of-concept-funnel |
| Implement region-based global identity proof of concept in Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-proof-of-concept-regional |
| Apply region-based global identity design with Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-region-based-design |
| Design a global customer identity solution with Azure AD B2C | https://learn.microsoft.com/en-us/azure/active-directory-b2c/b2c-global-identity-solutions |
Limits & Quotas
| Topic | URL |
|---|---|
| Review Azure AD B2C service limits and restrictions | https://learn.microsoft.com/en-us/azure/active-directory-b2c/service-limits |
| Monitor and manage Azure AD B2C directory size quota | https://learn.microsoft.com/en-us/azure/active-directory-b2c/tenant-management-directory-quota |
| Understand Azure AD B2C token types, contents, and constraints | https://learn.microsoft.com/en-us/azure/active-directory-b2c/tokens-overview |
| Create Azure AD B2C tenant and understand tenant limits | https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-tenant |
Security
Configuration
Integrations & Coding Patterns
Deployment
| Topic | URL |
|---|---|
| Deploy Azure AD B2C custom policies with Azure Pipelines | https://learn.microsoft.com/en-us/azure/active-directory-b2c/deploy-custom-policies-devops |
| Deploy Azure AD B2C custom policies with GitHub Actions | https://learn.microsoft.com/en-us/azure/active-directory-b2c/deploy-custom-policies-github-action |
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.
Gives 0 of the 12 instructions most containers cloud skills give
Counted across 607 of the 705 authors here whose files we hold, read 2026-09-06
- Run as non-root userin 34 of 607, across 27 files
- Use multi-stage buildsin 29 of 607
- Set resource requests and limitsin 24 of 607, across 20 files
- Configure liveness and readiness probesin 18 of 607, across 14 files
- Use named volumes for persistent datain 14 of 607, across 9 files
- Pin base image versionsin 14 of 607
- Set up environment variablesin 14 of 607, across 10 files
- Pin provider versionsin 14 of 607
- Apply least privilege RBAC permissionsin 10 of 607, across 7 files
- Create a dockerignore filein 10 of 607
- Use remote state with lockingin 9 of 607
- Pin base images by digestin 9 of 607, across 8 files
Said here and by no other author read
- Use the Category Index to locate relevant sections
- Use read_file for categories with line ranges
- Suggest pulling latest version if metadata is old
- Fetch documentation using network access
- Install tools if they are not available
Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once.