Microsoft Entra: Power Pages Auth Guide

Key insights

• Microsoft Entra External ID: A modern external identity service that replaces Azure AD B2C for Power Pages, handling sign-up, sign-in, and password reset in one place.
  It simplifies external user authentication for customer and partner portals.
• Key benefits: Faster setup from the Power Pages studio, built-in MFA support, social identity provider options, and better sign-in page branding.
  It centralizes identity policies so you avoid custom login code.
• Quick setup flow: In Power Pages Studio open Security > Identity providers, create an External Tenant, then register an app registration in that tenant.
  Enable ID and Access tokens, create a user flow, and copy the Client ID, Authority URL, and metadata into Power Pages.
• OpenID Connect basics: The integration uses the standard OpenID Connect pattern—redirect/Reply URL, token settings, and user flows—so it follows familiar identity rules.
  Grant admin consent when required and set redirect URIs correctly for reliable sign-in.
• Testing and contact mapping: Test end-to-end with sign-up methods like OTP or password flows, then verify the user updates a contact record in Dataverse.
  Use Contact mapping to link authenticated users to Power Pages contacts and ensure profile data syncs.
• Practical takeaway: Use Entra External ID as the native provider in Security > Identity providers for a guided, integrated setup that reduces manual steps.
  Restart the site after configuration and test sign-up, sign-in, and profile mapping before going live.

Introduction

Dhruvin Shah [MVP] published a clear, step-by-step YouTube tutorial that walks through configuring Microsoft Entra External ID as an authentication provider for Power Pages. The video positions Entra External ID as the modern replacement for Azure AD B2C and emphasizes an integrated setup inside Power Pages Studio, covering sign-up, sign-in, and password reset flows. Consequently, the tutorial aims to help makers and administrators move from manual identity assemblies to a guided configuration that reduces custom code and speeds deployment.

Video overview

Shah organizes the tutorial around a concise sequence of actions, beginning with creating an external tenant and ending with end-to-end testing of an external user registration. He demonstrates how to register an app, enable Access tokens and ID tokens, create a User Flow, and paste the Client ID, Authority URL, and Metadata Address into Power Pages site settings. Moreover, the recording shows practical steps such as choosing OTP versus password authentication and mapping authenticated users to contact records in Dataverse.

Step-by-step setup explained

First, Shah guides viewers to create a new external tenant in the Entra admin center and then register an app in that tenant, making sure to add the Power Pages reply URL. Next, he enables the required tokens and grants admin consent for API permissions so the application can return authentication tokens to the site. Then he creates a sign-up/sign-in user flow and links the app registration to that flow, which lets Entra External ID manage the entire user journey without custom login pages.

Deeper details and configuration notes

After linking the user flow, Shah copies the Client ID and the OpenID Connect endpoints back into the Power Pages identity provider configuration and restarts the site so the provider appears correctly. He also demonstrates optional settings such as logout URLs and contact mapping, showing how authenticated users can populate contact records in Dataverse automatically. In addition, Shah tests external user registration with OTP verification and then verifies that the site correctly updates the profile and contact data, which is crucial for real-world portal scenarios.

Benefits and tradeoffs

The video highlights clear benefits: a faster, low-code setup through Power Pages Studio, built-in support for MFA and social identity providers, and more straightforward branding and analytics compared with older Azure AD B2C methods. However, Shah also makes implicit tradeoffs visible; although the setup is more integrated, it still relies on classic OpenID Connect building blocks, so administrators must understand app registration, redirect URIs, and token settings. Therefore, organizations gain speed and manageability, but they must accept some operational overhead in tenant management and permission configuration.

Challenges and practical tradeoffs

Shah’s walkthrough exposes practical challenges you should consider, such as ensuring correct redirect URIs, granting admin consent, and mapping external profiles to Dataverse contacts in ways that respect data hygiene and privacy rules. Additionally, balancing user convenience and security can be delicate: enabling OTP or passwordless options improves user experience, while enabling strict MFA policies increases protection but may raise friction for some users. Consequently, teams must plan testing phases and rollback steps because a misconfigured provider can lock out users or create orphaned contacts.

Best practices and recommendations

Based on the video, Shah recommends testing the full flow in a staging site before enabling Entra External ID in production and keeping clear documentation of the Client ID, Authority URL, and metadata endpoints to simplify troubleshooting. He also advises enabling only the token types and user attributes you need, granting admin consent deliberately, and mapping contact fields thoughtfully so automated records remain useful and accurate. Finally, restarting the Power Pages site after configuration changes and validating contact creation in Dataverse are small but important steps to ensure a smooth launch.

Conclusion

In sum, Dhruvin Shah’s tutorial provides a practical, actionable guide for Power Pages makers who want to adopt Microsoft Entra External ID for external authentication while minimizing manual effort. Although the new approach streamlines several steps, the video responsibly illustrates the tradeoffs around operational complexity, security policy choices, and data mapping that teams must balance. Therefore, the tutorial is a useful resource for administrators and developers preparing to move from Azure AD B2C or to implement external sign-in flows with better integration and fewer custom components.

Keywords

Microsoft Entra External ID, Entra External ID Power Pages, Power Pages authentication setup, External identity authentication guide, Entra ID authentication tutorial, Power Pages external identity integration, Microsoft Entra authentication for Power Pages, Power Pages login with External ID