I have a browser-based web application that’s used self-service by our customers but also by our own employees on behalf of our customers. It currently uses a custom username/password security system which I’m removing in favour of Azure Entra ID. I’ve already chosen Azure External Identities over Azure AD B2C/B2B but, whilst I’ve been prototyping an External Tenant, I’m having doubts that is the best choice compared with using a Workforce Tenant. Ideally our employees would sign in using their Microsoft work accounts and customers would be able to sign up with their Microsoft, Google, Apple, etc account or create a username/password but what I think I’m missing with External Tenant is a sign up/in option for Microsoft – though I believe they can be invited and use their Microsoft identity after accepting the invitation. Is there a definitive reason I should swap to a Workforce Tenant or is the fact I can invite our employees using their Microsoft accounts and customers have a limited list of login options good enough (I would presume the list of identity providers will expand over time)?

I have a browser-based web application that’s used self-service by our customers but also by our own employees on behalf of our customers. It currently uses a custom username/password security system which I’m removing in favour of Azure Entra ID. I’ve already chosen Azure External Identities over Azure AD B2C/B2B but, whilst I’ve been prototyping an External Tenant, I’m having doubts that is the best choice compared with using a Workforce Tenant. Ideally our employees would sign in using their Microsoft work accounts and customers would be able to sign up with their Microsoft, Google, Apple, etc account or create a username/password but what I think I’m missing with External Tenant is a sign up/in option for Microsoft – though I believe they can be invited and use their Microsoft identity after accepting the invitation. Is there a definitive reason I should swap to a Workforce Tenant or is the fact I can invite our employees using their Microsoft accounts and customers have a limited list of login options good enough (I would presume the list of identity providers will expand over time)?

I have a browser-based web application that’s used self-service by our customers but also by our own employees on behalf of our customers. It currently uses a custom username/password security system which I’m removing in favour of Azure Entra ID. I’ve already chosen Azure External Identities over Azure AD B2C/B2B but, whilst I’ve been prototyping an External Tenant, I’m having doubts that is the best choice compared with using a Workforce Tenant. Ideally our employees would sign in using their Microsoft work accounts and customers would be able to sign up with their Microsoft, Google, Apple, etc account or create a username/password but what I think I’m missing with External Tenant is a sign up/in option for Microsoft – though I believe they can be invited and use their Microsoft identity after accepting the invitation. Is there a definitive reason I should swap to a Workforce Tenant or is the fact I can invite our employees using their Microsoft accounts and customers have a limited list of login options good enough (I would presume the list of identity providers will expand over time)?

I’m playing around with Entra External Identities and creating a simple sign in / sign up flow.

I’m trying to integrate Microsoft Entra External ID for our Signup flow.