Automated migration from Azure AD B2C to Entra External Id

Question

Automated migration from Azure AD B2C to Entra External Id

James Crowley 0

Is there yet any automated migration path available to users of Azure AD B2C? We are needing to make customisations and do not want to waste our time doing so on AD B2C. Thank you.

Rukmini 23,400 Reputation points Microsoft External Staff Moderator

2026-01-30T02:43:52.0666667+00:00
Hey James! I see you're curious about automating the migration from Azure AD B2C to Microsoft Entra External ID. As of now, there isn't a fully automated migration path available yet. However, you can migrate users and credentials manually from Azure AD B2C to Microsoft Entra External ID, which involves creating user accounts through the Microsoft Graph API.

Here are the general steps you'll want to follow to migrate:

Pre-migration Planning: Evaluate your current Azure AD B2C setup, including user data and configurations.

Setup Microsoft Entra External ID: You'll need to create an external tenant either through the Microsoft Entra admin center or using some tools like Visual Studio Code.

Data Migration: Use scripts or applications to call the Microsoft Graph API for migrating user accounts and any necessary attributes.

Test and Rollout: Finally, ensure everything works as expected by testing your setup before finalizing the switch.

Keep in mind that Azure AD B2C will no longer be available for new customers starting May 1, 2025, so moving to Microsoft Entra External ID is definitely a step in the right direction.

Additional Resources

Migrating users to Microsoft Entra External ID

Just-In-Time Password Migration to Microsoft Entra External ID (Preview)

Plan and execute a migration to Microsoft Entra External ID

Hope this helps you get started! If you have any specific questions about your configuration or need further details, feel free to ask!

Note: This content was drafted with the help of an AI system. Please verify the information before relying on it for decision-making.

1 answer

Your answer

Rukmini 23,400 Reputation points Microsoft External Staff Moderator

2026-01-30T02:43:52.0666667+00:00

Hey James! I see you're curious about automating the migration from Azure AD B2C to Microsoft Entra External ID. As of now, there isn't a fully automated migration path available yet. However, you can migrate users and credentials manually from Azure AD B2C to Microsoft Entra External ID, which involves creating user accounts through the Microsoft Graph API.

Here are the general steps you'll want to follow to migrate:

Pre-migration Planning: Evaluate your current Azure AD B2C setup, including user data and configurations.

Setup Microsoft Entra External ID: You'll need to create an external tenant either through the Microsoft Entra admin center or using some tools like Visual Studio Code.

Data Migration: Use scripts or applications to call the Microsoft Graph API for migrating user accounts and any necessary attributes.

Test and Rollout: Finally, ensure everything works as expected by testing your setup before finalizing the switch.

Keep in mind that Azure AD B2C will no longer be available for new customers starting May 1, 2025, so moving to Microsoft Entra External ID is definitely a step in the right direction.

Additional Resources

Migrating users to Microsoft Entra External ID

Just-In-Time Password Migration to Microsoft Entra External ID (Preview)

Plan and execute a migration to Microsoft Entra External ID

Hope this helps you get started! If you have any specific questions about your configuration or need further details, feel free to ask!

Note: This content was drafted with the help of an AI system. Please verify the information before relying on it for decision-making.

Answer 1

Microsoft have just released a JIT migration kit to migrate from any IDP to EEID.

It uses PowerShell scripting to automate the process.

https://github.com/microsoft/b2c-to-meeid-migration-tool/tree/main

Note: It is not yet production-ready.

I've got it working, so feel free to ask any further questions.

Essentially, it covers:

Bulk Export/Import - Efficient batch processing with retry logic and throttling management
✅ Just-In-Time (JIT) Password Migration - Seamless password migration on user's first login
✅ Full Observability - Application Insights integration with metrics and dashboards

Key Features

✅ Currently Available

Bulk User Export from Azure AD B2C with automatic pagination
Bulk User Import to External ID with extension attributes
JIT Password Migration via Custom Authentication Extension
UPN Domain Transformation preserving local-part identifiers as a workaround to enable sign-in alias functionality
Attribute Mapping with flexible field transformation
Export Filtering by display name pattern and user count limits
Built-in Retry Logic with exponential backoff
Comprehensive Telemetry with Application Insights integration
Local Development Mode using Azurite emulator (no Azure resources)
Multi-Instance Scaling for high-volume migrations

Share via

Automated migration from Azure AD B2C to Entra External Id

Additional Resources

1 answer

Key Features

✅ Currently Available

Your answer