Microsoft Entra External ID OpenID Connect Provider
Azure-native IAM platform (successor to Azure AD B2C). Simple per-MAU consumption pricing with a 50K free tier. FedRAMP High authorized with deep Microsoft ecosystem integration.
Features
If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.
Looking for Microsoft Entra External ID’s (C)IAM features like MFA, SSO, and user management? View Microsoft Entra External ID on the (C)IAM Identity Providers benchmark.
Frequently Asked Questions
Does Microsoft Entra External ID support the Authorization Code grant type?
Microsoft Entra External ID supports Authorization Code grant type. Read more
Does Microsoft Entra External ID support the Refresh Token grant type?
Microsoft Entra External ID supports Refresh Token grant type. Read more
Does Microsoft Entra External ID support the Client Credentials grant type?
Microsoft Entra External ID supports Client Credentials grant type. Read more
Does Microsoft Entra External ID support the Implicit grant type?
Microsoft Entra External ID supports Implicit, but it is deprecated or not recommended anymore. Read more
Does Microsoft Entra External ID support the Token Exchange grant type?
Microsoft Entra External ID does not support Token Exchange grant type. Microsoft Entra ID uses the On-Behalf-Of flow instead of the standard RFC 8693 token exchange grant type Read more
Does Microsoft Entra External ID support the Device Authorization Grant grant type?
Microsoft Entra External ID supports Device Authorization Grant grant type. Read more
Does Microsoft Entra External ID support the JWT Bearer Token grant type?
Microsoft Entra External ID supports JWT Bearer Token grant type. Read more
Does Microsoft Entra External ID support the SAML 2.0 Bearer Assertion grant type?
Microsoft Entra External ID partially supports SAML 2.0 Bearer Assertion grant type. Supports exchange of SAML v1.1 tokens issued by AD FS, not SAMLv2 tokens issued by Entra ID itself Read more
Does Microsoft Entra External ID support the Resource Owner Password Credentials grant type?
Microsoft Entra External ID supports Resource Owner Password Credentials, but it is deprecated or not recommended anymore. Read more
Does Microsoft Entra External ID support the PKCE extension?
Microsoft Entra External ID supports PKCE extension. Read more
Does Microsoft Entra External ID support the Authorization Endpoint endpoint?
Microsoft Entra External ID supports Authorization Endpoint endpoint. Read more
Does Microsoft Entra External ID support the Token Endpoint endpoint?
Microsoft Entra External ID supports Token Endpoint endpoint. Read more
Does Microsoft Entra External ID support the UserInfo Endpoint endpoint?
Microsoft Entra External ID supports UserInfo Endpoint endpoint. Read more
Does Microsoft Entra External ID support the Token Revocation endpoint?
Microsoft Entra External ID does not support Token Revocation endpoint. Read more
Does Microsoft Entra External ID support the Token Introspection endpoint?
Microsoft Entra External ID does not support Token Introspection endpoint.
Does Microsoft Entra External ID support the Device Authorization Endpoint endpoint?
Microsoft Entra External ID supports Device Authorization Endpoint endpoint. Read more
Does Microsoft Entra External ID support the OpenID Connect Discovery Endpoint endpoint?
Microsoft Entra External ID supports OpenID Connect Discovery Endpoint endpoint. Read more
Does Microsoft Entra External ID support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?
Microsoft Entra External ID partially supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Supports through OpenID Connect Discovery Read more
Does Microsoft Entra External ID support the none token endpoint authentication method?
Microsoft Entra External ID supports none token endpoint authentication method.
Does Microsoft Entra External ID support the client_secret_basic token endpoint authentication method?
Microsoft Entra External ID supports client_secret_basic token endpoint authentication method. Read more
Does Microsoft Entra External ID support the client_secret_post token endpoint authentication method?
Microsoft Entra External ID supports client_secret_post token endpoint authentication method. Read more
Does Microsoft Entra External ID support the private_key_jwt token endpoint authentication method?
Microsoft Entra External ID supports private_key_jwt token endpoint authentication method. Read more
Does Microsoft Entra External ID support the none prompt?
Microsoft Entra External ID supports none prompt. Read more
Does Microsoft Entra External ID support the login prompt?
Microsoft Entra External ID supports login prompt. Read more
Does Microsoft Entra External ID support the consent prompt?
Microsoft Entra External ID supports consent prompt. Read more
Does Microsoft Entra External ID support the select_account prompt?
Microsoft Entra External ID supports select_account prompt. Read more
Does Microsoft Entra External ID support the create prompt?
Microsoft Entra External ID does not support create prompt.
Does Microsoft Entra External ID support the RP-initiated Logout feature?
Microsoft Entra External ID supports RP-initiated Logout feature. Read more
Does Microsoft Entra External ID support the Dynamic Client Registration Protocol feature?
Microsoft Entra External ID does not support Dynamic Client Registration Protocol feature.
Does Microsoft Entra External ID support the Dynamic Client Registration Management Protocol feature?
Microsoft Entra External ID does not support Dynamic Client Registration Management Protocol feature.
Does Microsoft Entra External ID support the Refresh Token Rotation feature?
Microsoft Entra External ID supports Refresh Token Rotation feature. Read more
Does Microsoft Entra External ID support the Refresh Token Rotation Grace Period feature?
Microsoft Entra External ID supports Refresh Token Rotation Grace Period feature. The Microsoft identity platform doesn't revoke the previous refresh token when it's used to acquire a new one, so the rotated-out token stays valid rather than being invalidated immediately; there is no configurable short-lived overlap window. Read more
Does Microsoft Entra External ID support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?
Microsoft Entra External ID does not support OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature. Microsoft Entra ID uses SHR-based proof of possession instead of the standard DPoP (RFC 9449) Read more
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate.