Run Azure AD B2C's sign-up & sign-in pages under a custom domain, for e.g., login.contoso.com, instead of login.microsoftonline.com.
Due to various technical limitations, the first iteration of the customer-owned domains functionality will not be available for a few more months. We will provide an update as soon as we can get a more specific ETA.
Steve Ferguson commented
@Nasos, I opened a support ticket (119111924003237) and spoke to Travis Oelschlager on 11/20. He seemed unaware that there was an option to make it happen outside of self-service offerings, and I referenced this post in my ticket. Can you please put me in touch with the right person?
The only information I received as a result of my ticket was a link to the FAQ. https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-faqs?tabs=applications#can-i-use-my-own-urls-on-my-sign-up-and-sign-in-pages-that-are-served-by-azure-ad-b2c-for-instance-can-i-change-the-url-from-contosob2clogincom-to-logincontosocom
Please advise. Thank you.
Nasos Kladakis commented
@Steve Ferguson. I think that the point is clear. B2Clogin is by no means the answer to what you describe. It is just a solution to avoid Microsoft branding.
Opening a support ticket will be the way to go for now as we can make it happen but we don't have a self-service method currently.
One thing to keep in mind: We are focusing on production environments so we don't provide custom domains for test/dev environments.
Steve Ferguson commented
You seem to be missing the point here. The problem is not (entirely) that the domain was Microsoft-branded, it's that the domain is not using *our* corporate domains. As something that is going to be the front door to our online presence, this is frequently the first thing the end-users see. And when they see 'b2clogin.com' anyone paying any attention at all is going to wonder what's going on. As someone currently in the process of evaluating B2C for our cloud presence, I need to know if this feature is available *today* via any means, even if that involves making a direct support request. Either it is, and I can proceed, or it is not, and I have to look elsewhere for an identity provider.
Nasos Kladakis commented
We are extremely sorry we have missed this specific request-topic. I want to apologize as this is not the way we treat and interact with our customers and all of you. It was a huge miss from our side not following up on this topic.
We are working on this and we will share more information shortly. If there is an urgent request for a custom domain please let us know.
Also we provide the option of "b2clogin.com" for a while now so no need to use a Microsoft branded domain name.
just tell us how much longer we have to wait for this..................
I think I am going to make some strong statements here, I also feel like it is a necessary thing to do given how you have been ignoring your clients for more than 2 years now.
You should be embarrassed, people have been posting questions about improvements to B2C service for so long and you did not demonstrate an inch of courtesy by at least responding with something like "Hey clients thank you for your messages, we are currently working on this issue".
We all understand that you are a giant in the cloud world, but this makes your clients think "Should I move to another cloud provider?"
I am currently in process of building a SaaS service which will be hosted on your cloud platform and B2C is a very critical component since we are building a multi-tenant application. I would also like to add that my service will help people get on board the Azure cloud.
So, can you please show your clients some courtesy and at least respond to us?
Nothing to thank you for here.
Any update on this? Customers get a little nervous now if B2C was the right way to go.
Definitely interested in seeing this as a feature; once its available I'm moving all id management to b2c
Has Azure AD B2C been abandoned? How on earth is this taking 2+ years to implement? Should I go elsewhere for my auth needs?
how many years it will take to complete. we want user experience simple no here and there. open site sign in signup in same domain so that user don't have to go here and there. just blend in
Heiko Luxenhofer commented
Youssef oleik commented
Any update on this?
Gregor Soll commented
It's now 2 Jears later that you have started. So what's going on. When is it finshed?
Tim S. commented
This feature could also solve the issue, that Safari 12 and the ITP 2.0 setting make the Azure AD B2C unusable for this browser. This affects desktop as well as mobile user. The issue is described here in detail: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/Known-issue-on-Safari
The issue can be solved with the help of a custom domain like auth0 does: https://auth0.com/docs/api-auth/token-renewal-in-safari
Tim Getsch commented
We have Azure AD B2C sign in support completely implemented, but we are waiting to push it live until we get custom domains. When will this be available? We do not want to use the your-tenant-name.b2clogin.com option because this causes browsers that have saved passwords to not recognize the passwords as belonging to the same domain. We don't want to force a bunch of customers through the forgot password scenario just because *.b2clogin.com is different from our domain.
Ricky D commented
Previous comment from Azure AD Team says :
"Fully customizable domains (e.g. any_subdomain. any_domain.com) are not widely available. It is goal to eventually provide this flexibility for all tenants who need it."
How do we register as a tenant that "needs it"? :)
Dipesh A commented
Any updates on eta or how to apply for this?
admin rg commented
Hi AD Team
According to the statement made, fully costimizable domains can be made available for those "who need it". How can a customer apply for this?
Michael Keymolen commented
If i go to Microsoft conference and i follow talks about Azure AD B2C, the speakers all show subway.com as a their demo. Subway is using azure ad b2c with their custom domain (id.subway.com) so it is definitely possible. please provide us with information how to achive this. Custom DNS is critical for a decent identity provider. It's a shame this is still not being implemented!