Entra ID

Azure AD B2C Migration Tools Now Available

3 min read

Summary

Microsoft has released generally available migration tools and guidance to help Azure AD B2C customers move to Microsoft Entra External ID. With Azure AD B2C no longer receiving new features, these new options give IT teams a clearer path to modernize customer identity while reducing migration risk.

Need help with Entra ID?Talk to an Expert

Azure AD B2C migration tools are now available

Introduction

Organizations using Azure AD B2C now have new Microsoft-supported tools to plan and execute a move to Microsoft Entra External ID. This matters because Azure AD B2C is no longer receiving new features, while Microsoft continues investing in External ID as its next-generation customer identity platform.

For IT teams, this is an important signal to start migration planning early rather than waiting for timelines or technical debt to create pressure later.

What’s new

Microsoft announced that the following migration resources are now generally available:

  • Just-in-Time (JIT) migration for progressive user migration during sign-in
  • High-Scale Compatibility (HSC) mode for large-scale or complex environments
  • Migration guidance and architecture blueprint for planning application sequencing, credential migration, and cutover strategy

Microsoft also highlighted recent Entra External ID platform enhancements, including:

  • Email and SMS OTP MFA
  • Social identity providers through browser-delegated flows
  • Native app to web view SSO
  • Sign-in and sign-up with alias
  • Microsoft Entra ID federation with External ID in public preview
  • Self-service password reset with SMS OTP

Choosing between JIT and HSC

The two migration paths support different priorities:

  • JIT migration is best for most organizations that want a cleaner cutover with minimal user disruption
  • HSC mode is designed for high-scale environments, especially those with more than 5 million users or more complex architectural constraints

In short, JIT focuses on simplicity and user experience, while HSC focuses on scale and operational continuity.

Why this matters for administrators

Azure AD B2C remains supported for existing tenants, but Microsoft has made it clear that new innovation is happening only in Entra External ID. For identity and application teams, that means migration is now a strategic planning exercise rather than a future consideration.

External ID also brings benefits beyond feature parity, including:

  • A modern extensibility model that reduces dependence on complex custom policy XML
  • Better integration with the broader Microsoft Entra ecosystem
  • Improved monitoring, diagnostics, and audit capabilities
  • Continued investment in passwordless and fraud protection capabilities

Admins should take a structured approach:

  1. Assess current applications, user populations, integrations, and custom policies
  2. Decide whether JIT or HSC best fits business and technical requirements
  3. Execute a proof of concept in a non-production environment
  4. Validate identity flows, user journeys, and application dependencies
  5. Engage partners if the environment includes complex customizations or large-scale migration needs

Microsoft has also published a qualified migration partner directory for organizations that need implementation support.

Bottom line

The new Azure AD B2C migration tooling gives organizations a clearer path to Microsoft Entra External ID. Starting early will help IT teams reduce risk, preserve user experience, and modernize customer identity on Microsoft’s actively developed platform.

Need help with Entra ID?

Our experts can help you implement and optimize your Microsoft solutions.

Talk to an Expert

Stay updated on Microsoft technologies

Azure AD B2CMicrosoft Entra External IDidentity migrationcustomer identityJIT migration

Related Posts

Entra ID

Microsoft Entra ID Branded Sign-In CSS Changes 2026

Microsoft Entra ID is tightening the security of branded sign-in pages by retiring support for custom CSS positioning properties starting October 26, 2026. Organizations that use these properties in company branding should review and remove them now to avoid layout changes and maintain a trusted sign-in experience.

Entra ID

Microsoft Entra Zero Trust Updates for AI and Apps

Microsoft has announced new Microsoft Entra Internet Access and Private Access capabilities to secure AI, web, and private app traffic with Zero Trust controls. The update adds public preview features for network DLP, AI agent controls, and agentic scenarios, while generally available features expand secure access for BYOD, kiosk devices, and MCP traffic visibility.

Entra ID

Azure AD B2C Migration Policy Analyzer Now GA

Microsoft has made the Migration Policy Analyzer generally available to help organizations assess Azure AD B2C custom policies before moving to Microsoft Entra External ID. The tool generates a structured migration assessment, helping IT teams understand current implementations, identify gaps, and prioritize migration work faster.

Entra ID

Microsoft Entra Agent ID: Secure AI Agent Access

Microsoft is urging organizations to treat AI agent governance as an immediate identity and access problem, not a future concern. Based on feedback from identity professionals at Identiverse 2026, the company highlights unmanaged agent sprawl, orphaned agents, and weak agent-to-agent controls, while positioning Microsoft Entra Agent ID and Agent 365 as the foundation for inventory, ownership, and policy enforcement.

Entra ID

Microsoft Entra Agent ID Adds AI Agent Governance

Microsoft has announced general availability of agent identity governance capabilities in Microsoft Entra as part of Microsoft Agent 365. The update helps organizations govern AI agents with dedicated identities, named sponsors, access packages, and lifecycle workflows to reduce overprivileged access and improve accountability.

Entra ID

Microsoft Purview and Entra Add Real-Time AI DLP

Microsoft has announced a public preview that extends data protection to the network layer using Microsoft Purview and Microsoft Entra. The integration helps organizations detect and block sensitive data moving to unmanaged SaaS, personal cloud storage, and generative AI apps in real time, reducing data leakage risk before exposure occurs.