Azure AD与Azure AD B2C与Azure AD B2B [英] Azure AD vs Azure AD B2C vs Azure AD B2B

问题描述

在Azure AD B2C和Azure AD B2B出现之前，通常我将我的应用程序添加到我们租户的Azure AD中，并且Office 365用户可以使用其帐户(SSO)访问这些应用程序.

Before Azure AD B2C and Azure AD B2B come into the picture, usualy I added my applications to Azure AD of our tenancy and office 365 users could access the applications using their account (SSO).

我不是专家，所以我需要查看代码并阅读确切的示例以理解概念.

I am not a guru so I need to see code and read about exact examples to understand the concepts.

我可以像通常使用Azure AD一样将B2C用于SSO吗?否则，如何/何时使用B2C和B2B?

Can I use B2C for SSO as I usually used Azure AD? otherwise how/when can I use B2C and B2B?

感谢并感谢各种建议.

推荐答案

Azure AD是一种目录服务，旨在为组织及其在云中进行身份管理的需求提供服务.您根据Azure AD开发，可以使用它保护应用程序的安全-Azure AD租户中的用户可以使用它.

Azure AD is a directory service with the goal of serving organisations and their needs for identity management in the cloud. You develop against Azure AD, you can secure your applications with it - their users in Azure AD tenants can use it.

您的应用程序针对使用Azure AD(Office 365)的特定组织或多个组织.

Your application is targeted for a specific organisation or multiple organisations using Azure AD (Office 365).

Azure AD B2B只是Azure AD的一项功能.它允许组织为其他租户的用户授予对其应用程序和服务的访问权限.从您的应用程序角度来看，没有任何变化.它仍然是相同的Azure AD应用程序. Azure AD B2B具有可用于创建来自另一个目录的用户邀请流程的API，但它不会更改您的应用程序设计等.

Azure AD B2B is just a feature of Azure AD. It allows organisations to grant access to their applications and services for users from other tenants. From your app perspective nothing changes. It is still same Azure AD app. Azure AD B2B has an API which can be used to create flows for the invitation of users from another directory but it is not changing your app design, etc.

Azure AD B2C是基于相同技术但功能与Azure AD不同的另一项服务. Azure AD B2C的目标是为消费者应用程序建立目录，用户可以在其中使用电子邮件ID或社交提供商(例如Google，FB，MSA)注册，称为联合身份验证网关. Azure AD B2C的目标是允许组织管理在所有应用程序之间共享的客户身份的单一目录，即单一登录.

Azure AD B2C is another service built on the same technology but not the same in functionality as Azure AD. Azure AD B2C target is to build a directory for consumer applications where users can register with e-mail ID or social providers like Google, FB, MSA, known as Federation Gateway. The goal for Azure AD B2C is to allow organizations to manage single directory of customer identities shared among all applications i.e. single sign-on.

Azure AD B2C并非针对组织用户，而是针对消费者.

Azure AD B2C is not targeted at organisation users but consumers.

简单: Azure AD-适用于组织及其企业用户的应用 Azure AD B2C-适用于客户的应用程序，例如移动应用程序，购物门户等

Simple: Azure AD - apps for organisations and their corporate users Azure AD B2C - apps for customers, like mobile apps, shopping portals etc.

为了快速参考，我在博客文章中收集了此信息: http ://predica.pl/blog/azure-ad-b2b-b2c-puzzled-out/

For quick reference I've gathered this in blog post: http://predica.pl/blog/azure-ad-b2b-b2c-puzzled-out/

这篇关于Azure AD与Azure AD B2C与Azure AD B2B的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！