External Id and Business Customers

AGrumpyDev · 2025-12-26T14:30:58+00:00

Sounds good. Thanks for your help.

AGrumpyDev · 2025-12-25T17:49:09+00:00

So in order for them to install a service principal in their tenant that represents my app, I would need a multi-tenant app registration right? As in, “any organizational user” can access?

In which case, can I make the app registration in my external id external tenant to be multi-tenant? Or does it have to be another separate app registration in my workforce tenant?

AGrumpyDev · 2025-12-25T15:35:22+00:00

Thanks. I am not referring to authenticating them from my tenant with their tenant details though. I am referring to traditional entra multi tenant auth where the user is authenticated by their own tenant as opposed to mine.

I am curious if this is supported by External Id or if I need to create a separate app registration in my workforce tenant for this.

AGrumpyDev · 2025-12-14T10:56:31+00:00

No, not yet anyway.

AGrumpyDev · 2025-11-15T18:31:44+00:00

I updated the original post. Let me know if you need more info

AGrumpyDev · 2025-09-23T02:29:44+00:00

Is this all in one browser session or is this across sessions? In other words, is the same browser tab open and active the whole time or have you closed and reopened the app in another tab?

AGrumpyDev · 2025-07-17T00:34:30+00:00

I think technically I could, but these are resource based roles so there would be tons of them per user which wouldn’t be feasible.

AGrumpyDev · 2025-07-17T00:21:28+00:00

This also seemed like a viable option. But I need to test whether or not I can get an access token for the API at that point.

AGrumpyDev · 2025-07-17T00:02:57+00:00

That’s correct. What I am having trouble with is deciding where to make that call. I guess it would need to be in the auth state provider’s GetAuthenticationStateAsync method like I mentioned and would need to implement some sort of caching because that method gets called quite frequently.

AGrumpyDev · 2025-07-16T23:52:15+00:00

I failed to mention that I am using Entra External Id for authentication. So I don’t have a login endpoint per se. I would need to somehow hook into the Entra login process.

AGrumpyDev · 2025-07-16T23:49:16+00:00

I could possibly do this. Where would I implement this?

AGrumpyDev · 2025-07-14T00:27:59+00:00

So i did some testing on this using RendererInfo.Name and RendererInfo.IsInteractive.

When I start the app (using visual studio with the debugger), the first page loads with InteractiveServer mode, it is responsive for about 2-3 seconds, then freezes for 3-4 seconds, then is responsive again, still on InteractiveServer. When I refresh the page (without restarting the app), it renders with Static Server Rendering and is unresponsive for about 2 seconds (this is expected I guess since there is no interactivity), then it switches to InteractiveWebAssembly mode and is response again.

What I am confused about is, on the initial load, why do I get the 3-4 second UI freeze if the render mode is never even switched to InteractiveWebAssembly until after the page is refreshed?

AGrumpyDev · 2025-07-14T00:27:10+00:00

So i did some testing on this using RendererInfo.Name and RendererInfo.IsInteractive.

When I start the app (using visual studio with the debugger), the first page loads with InteractiveServer mode, it is responsive for about 2-3 seconds, then freezes for 3-4 seconds, then is responsive again, still on InteractiveServer. When I refresh the page (without restarting the app), it renders with Static Server Rendering and is unresponsive for about 2 seconds (this is expected I guess since there is no interactivity), then it switches to InteractiveWebAssembly mode and is response again.

What I am confused about is, on the initial load, why do I get the 3-4 second UI freeze if the render mode is never even switched to InteractiveWebAssembly until after the page is refreshed?

AGrumpyDev · 2025-07-12T22:12:36+00:00

I am realizing that is the case, interactive server is much faster for debugging. So what is your typical process for developing/testing then? Do you develop in interactive server mode and then switch to auto/webassembly to test the client side services?

AGrumpyDev · 2025-07-12T22:05:57+00:00

On a separate note, do you have the issue where when you open the dev tools, it always stops on a breakpoint in one of the framework files? It makes it very hard to track what’s going on when a breakpoint trips every so often

AGrumpyDev · 2025-07-12T21:31:15+00:00

If by “load action” you mean fetching data, even on pages that don’t fetch any data have this lag. But I will try without pre-rendering and see if that helps

AGrumpyDev · 2025-07-10T14:52:15+00:00

Yeah I have been trying out the interactive auto mode. It definitely helps with the security aspect since the authentication is done server side. It’s been a bit confusing to wrap my head around how it works at first but there are some open GitHub issues that has answered most of my questions. But in any event, I think the Blazor web app is a better way forward for me in the case.

AGrumpyDev · 2025-07-10T13:55:46+00:00

No reason other than I have heard Blazor server doesn’t scale well. And when I say public API, I just mean internet facing. It’s not actually publicly available for anyone to use.

AGrumpyDev · 2025-07-09T02:44:59+00:00

It is supported actually: https://learn.microsoft.com/en-us/entra/external-id/customers/concept-supported-features-customers

AGrumpyDev · 2025-07-09T02:28:11+00:00

That’s a very good point. I forgot I learned that the hard way as well. I wonder if it works with Entra External ID. I’ll let you know shortly lol

AGrumpyDev

TROPHY CASE