Can we achieve SSO between 2 different login journeys which connect to 2 different Identity Stores in adb2c?

Question

I am using Azure Active Directory Business to Consumer(adb2c). We have designed custom policies, part of Identity Experience Framework(IEF) of Azure for 2 different applications. One application is using login policy/flow which connects to a 3rd party Identity store. Another application is using login policy/flow which connects to a different 3rd party Identity store. Can we achieve SSO between them?

I am trying to use DefaultSSOSessionProvider session provider to skip technical profile which actually connect to 3rd party IDP and complete the login in case of SSO scenario. Getting exceptions while doing this.

Will this be possible or is there any other approach to achieve SSO?

Answer 1

In order to enable SSO for different applications in Azure AD B2C you need to configure SSO at the tenant level . To be able to skip external IdP selection you need to set a TP that leverages the ExternalLoginSSOSessionProvider in the UseTechnicalProfileForSessionManagement attribute of your external IdP TP. Take a look to the following custom policy permalink for a sample.

Finally, the external IdP SSO is controlled by the IdP itself and not by B2C so if some problem arises ensure the IdP SSO is working before validating B2C SSO.