Hi all,

I’ve seen very mixed opinions on Entra External ID (EEID) here. The common complaints seem to be:

Poor documentation

Heavy reliance on click-ops

Problems with password reset emails

Weak SSO integrations

A general sense that the product is still immature

My team is considering moving from B2C to EEID for two main reasons:

Less MFA friction. Our users are tired of waiting on email OTPs and I assume the friction is much the same entering codes from auth apps. We’d love to use passkeys or biometrics wherever possible. We also wanted a “remember this device” feature, but since B2C doesn’t manage devices, I expect most of that would have to live in our own API.

App-level role assignments.…