web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Power Pages - Security
Answered

When is it okay to use the Local IdP?

(0) ShareShare
ReportReport
Posted on by 20
I have seen a couple of places that the local identity provider is not advised to be used; however, I really appreciate its more fluid feeling place within powerpages itself ie: being able to create an account without needing to go out to Azure B2c to create your account, also individuals being added into your contact table in your Dataverse environment is very helpful for our use case (which I will add at the end).

Anyone able to shed more light on why Azure B2C is better? Or maybe even another external identity provider.
 
Our use case is: Looking into power pages as an alternative primarily an event registration portal with payment processing capabilities (credit cards are not stored). Also have some admin management features that would allow individuals to manage their account / see account summaries if they have the proper role. Most sensitive information would be past invoices, email addresses, phone numbers, etc. But most of the information should already be available on the web. 

Thanks and greatly appreciate any advice! 

Best,
Bilbo
Categories:
I have the same question (0)
  • Verified answer
    Fubar Profile Picture
    8,304 Super User 2025 Season 2 on at
    When is it okay to use the Local IdP?
    Believe, that technically it is less secure.  But also, Microsoft have been pushing B2C as a preferred alternative for quite some time so I would anticipate that at some point in time they will announce it will be deprecated (believe at one point it time in the past it may have been announced, without a timeframe given - but they may have stepped back from it at the moment).
     
    With other identity providers you can still add Contacts to your dataverse and send them an Invitation, and turn off open registration so only those that are invited can register. For Azure AD/Entra you can also add conditional access to the App (each portal install gets an app in Azure) and limit access to the app to specific Security Groups etc (e.g. so still have open registration that is limited to only those in specific security groups).
  • bilboswaggins23 Profile Picture
    20 on at
    When is it okay to use the Local IdP?
    Thanks for the Response Fubar!

    That makes sense. I have also see that there are rumors of deprecation, but, I haven't seen any concrete deadline. Also, have heard that it is less secure, but, I still am unsure by what metrics it is less secure. 

    Good to know that contacts can be added through other IdPs, but, still feel like its a more clunky experience overall to have to send the user over set-up their B2C contact and then bring them back to the portal. 

    Ahh well, still gets me a bit closer to understanding power pages, thanks again!

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Coming soon: forum hierarchy changes

In our never-ending quest to improve we are simplifying the forum hierarchy…

Chiara Carbone – Community Spotlight

We are honored to recognize Chiara Carbone as our Community Spotlight for November…

Leaderboard > Power Pages

#1
Jerry-IN Profile Picture

Jerry-IN 64

#2
Fubar Profile Picture

Fubar 46 Super User 2025 Season 2

#3
Michael E. Gernaey Profile Picture

Michael E. Gernaey 27 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics