Azure AD B2C as Oracle Fusion ERP IDP

Question

We have a bunch of Oracle applications that we would like to integrate with Azure AD B2C IDP with SSO. Has anyone used Azure AD B2C as IDP for Oracle Fusion and similar apps? It is possible out of the box with Azure AD: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/oracle-fusion-erp-tutorial but cannot find any documentation on B2C.

I understand we could do it the general way as we do by registering a SAML SP https://docs.microsoft.com/en-us/azure/active-directory-b2c/connect-with-saml-service-providers.

Would like to check with the experts on any better way for this or if there could be any drawbacks on this. Any help much appreciated.

Answer 1

Yes, the SAML SP approach works.

I've done a number of these e.g. this.

The biggest problem is mapping the B2C user to the application. You would have to ensure that Oracle recognises the B2C user (NameID) as B2C users can have any email - not necessarily domain-joined.

Also, a B2C user can be a simple user name e.g. JoeB or a phone number depending on how you set it up.