Entra ID

Azure AD B2C Migration Tools Now Available

3 min read

Summary

Microsoft has released generally available migration tools and guidance to help Azure AD B2C customers move to Microsoft Entra External ID. With Azure AD B2C no longer receiving new features, these new options give IT teams a clearer path to modernize customer identity while reducing migration risk.

Need help with Entra ID?Talk to an Expert

Azure AD B2C migration tools are now available

Introduction

Organizations using Azure AD B2C now have new Microsoft-supported tools to plan and execute a move to Microsoft Entra External ID. This matters because Azure AD B2C is no longer receiving new features, while Microsoft continues investing in External ID as its next-generation customer identity platform.

For IT teams, this is an important signal to start migration planning early rather than waiting for timelines or technical debt to create pressure later.

What’s new

Microsoft announced that the following migration resources are now generally available:

  • Just-in-Time (JIT) migration for progressive user migration during sign-in
  • High-Scale Compatibility (HSC) mode for large-scale or complex environments
  • Migration guidance and architecture blueprint for planning application sequencing, credential migration, and cutover strategy

Microsoft also highlighted recent Entra External ID platform enhancements, including:

  • Email and SMS OTP MFA
  • Social identity providers through browser-delegated flows
  • Native app to web view SSO
  • Sign-in and sign-up with alias
  • Microsoft Entra ID federation with External ID in public preview
  • Self-service password reset with SMS OTP

Choosing between JIT and HSC

The two migration paths support different priorities:

  • JIT migration is best for most organizations that want a cleaner cutover with minimal user disruption
  • HSC mode is designed for high-scale environments, especially those with more than 5 million users or more complex architectural constraints

In short, JIT focuses on simplicity and user experience, while HSC focuses on scale and operational continuity.

Why this matters for administrators

Azure AD B2C remains supported for existing tenants, but Microsoft has made it clear that new innovation is happening only in Entra External ID. For identity and application teams, that means migration is now a strategic planning exercise rather than a future consideration.

External ID also brings benefits beyond feature parity, including:

  • A modern extensibility model that reduces dependence on complex custom policy XML
  • Better integration with the broader Microsoft Entra ecosystem
  • Improved monitoring, diagnostics, and audit capabilities
  • Continued investment in passwordless and fraud protection capabilities

Admins should take a structured approach:

  1. Assess current applications, user populations, integrations, and custom policies
  2. Decide whether JIT or HSC best fits business and technical requirements
  3. Execute a proof of concept in a non-production environment
  4. Validate identity flows, user journeys, and application dependencies
  5. Engage partners if the environment includes complex customizations or large-scale migration needs

Microsoft has also published a qualified migration partner directory for organizations that need implementation support.

Bottom line

The new Azure AD B2C migration tooling gives organizations a clearer path to Microsoft Entra External ID. Starting early will help IT teams reduce risk, preserve user experience, and modernize customer identity on Microsoft’s actively developed platform.

Need help with Entra ID?

Our experts can help you implement and optimize your Microsoft solutions.

Talk to an Expert

Stay updated on Microsoft technologies

Azure AD B2CMicrosoft Entra External IDidentity migrationcustomer identityJIT migration

Related Posts

Entra ID

Microsoft Entra ID Security Updates: Key 2026 Changes

Microsoft is making three important Microsoft Entra ID security changes in 2026: retiring Custom controls in favor of External MFA, enforcing Conditional Access more consistently during credential registration, and requiring explicitly registered authentication methods for SSPR. These updates matter because they close policy enforcement gaps, improve identity security, and require admins to review configurations before enforcement deadlines arrive.

Entra ID

Global Secure Access Operations Guide Now Available

Microsoft has published a new Microsoft Entra Global Secure Access operations guide on Microsoft Learn to help teams manage day 2 operations after deployment. The guide provides prescriptive monitoring, health checks, role assignments, templates, and automation guidance so IT teams can run Global Secure Access more consistently and proactively.

Entra ID

Microsoft Entra Agent ID GA Secures AI Agents

Microsoft Entra Agent ID is now generally available, giving organizations a dedicated identity and access foundation for AI agents in production. Combined with the Microsoft Agent 365 CLI and SDK, it helps IT and security teams onboard, govern, audit, and secure agent instances across Microsoft and non-Microsoft frameworks.

Entra ID

Microsoft Entra June 2026: Passkeys, Linux MFA, B2C

Microsoft Entra’s June 2026 updates bring major identity improvements across passkeys, phishing-resistant MFA for Linux desktops, and Azure AD B2C migration to External ID. The release also adds cross-tenant group sync, app deactivation, redesigned My Account pages, and new governance features that help IT teams strengthen security and simplify administration.

Entra ID

Microsoft Entra Tenant Governance Finds Shadow Tenants

Microsoft Entra Tenant Governance now helps organizations discover shadow tenants connected through B2B collaboration, multitenant apps, and shared billing signals. The new related tenants capability gives IT teams continuous visibility into hidden tenant sprawl so they can assess risk, quarantine unsanctioned tenants, and tighten identity governance.

Entra ID

macOS Platform SSO in ADE Now Generally Available

Microsoft has made Platform SSO during Automated Device Enrollment generally available for macOS. The update lets organizations register devices and enable Platform SSO automatically during setup, reducing user prompts and helping IT teams deliver a more secure, consistent onboarding experience from day one.