Azure AD B2C Authentication - Restrict to only certain customer users

Question

I have an ASP.Net core web application and integrated authentication using the Azure AD B2C Tenant/Application. I'm able to authenticate and get the user claims in my web application.

But what I additionally want is to allow only certain customer users access the web application. I want to do this at the B2C Tenant itself. Right now any B2C customer user can sign in. Any help, ideas, insight will be appreciated.

Answer 1

You may know there is an Manage user assignment for an app feature in Azure Active Directory. But it's not available in Azure B2C.

Currently the recommended way to control the access in Azure B2C is defining custom attributes and check the claims in token.

If the expected claim is included, you allow the user to continue.