Microsoft EntraEntra External ID
Customer and partner identity (CIAM) for securing external-facing apps.
Microsoft Entra External ID is a customer identity and access management (CIAM) platform for securing sign-in and access for customers, partners, and other external users of your apps — with customisable sign-up and sign-in, social and enterprise identity providers, MFA, and conditional access. Faltrox designs, deploys, and operates it as managed external identity.
Overview
What Entra External ID is
Securing external users — customers, partners, consumers of your apps — has different needs from workforce identity: frictionless sign-up and sign-in, social and enterprise login, and scale, without compromising security. Microsoft Entra External ID is the CIAM platform for that, built on the Entra platform.
It provides customisable, branded sign-up and sign-in experiences, support for social identity providers (Google, Facebook, Apple) and enterprise federation, multi-factor authentication, conditional access, and identity verification — securing external-facing apps while giving external users a smooth experience. It scales to consumer volumes and integrates with the wider Entra estate. Faltrox designs the external identity experience and policy, deploys it, and operates it as managed external identity.
Coverage
What it protects
The platforms, threats, and surfaces this product is built to defend.
Customers & Consumers
Secures sign-in and access for customers and consumers of your apps.
Partners & B2B
Handles partner and business external-user access.
Social & Enterprise Login
Supports social identity providers and enterprise federation.
MFA & Conditional Access
Multi-factor authentication and conditional access secure external access.
Identity Verification
Identity verification for higher-assurance external onboarding.
Consumer Scale
Scales to consumer volumes for external-facing applications.
How it works
The mechanism
How the product moves from signal to protected state, step by step.
- 01
Onboard
External users sign up through customisable, branded sign-up and sign-in experiences.
- 02
Authenticate
Users authenticate via social, enterprise, or local identity, with MFA where needed.
- 03
Verify
Identity verification adds assurance for higher-risk external onboarding.
- 04
Secure
Conditional access and threat protection secure external access to apps.
- 05
Operate
Faltrox designs the experience and policy and operates it as managed external identity.
Capabilities
Key capabilities
Customer Identity (CIAM)
Secures sign-in and access for customers, partners, and external users of your apps.
Customisable Sign-Up/Sign-In
Branded, customisable sign-up and sign-in experiences.
Social & Enterprise Login
Supports social identity providers (Google, Facebook, Apple) and enterprise federation.
MFA & Conditional Access
Multi-factor authentication and conditional access for external access.
Identity Verification
Identity verification for higher-assurance external onboarding.
Consumer Scale
Scales to consumer volumes for external-facing applications.
Threat Protection
Protects external identities against fraud and account takeover.
Entra Integration
Built on the Entra platform and integrated with the wider identity estate.
Works with
Part of the platform
Microsoft products this pairs with, and the Faltrox services that operate it.
Delivery
You buy the outcome, not the console
Managed by Faltrox
Faltrox licenses, deploys, and tunes Microsoft Entra External ID for your environment, then runs it as part of a managed service, so you get the protection without staffing another security console.
FAQ
Common questions
01What is CIAM and how is it different from workforce identity?
Customer Identity and Access Management (CIAM) secures external users — customers, partners, consumers of your apps — rather than employees. It prioritises frictionless sign-up and sign-in, social and enterprise login, and consumer scale, while still enforcing security like MFA and conditional access. Entra External ID is Microsoft’s CIAM platform.
02Can external users log in with social accounts?
Yes — it supports social identity providers like Google, Facebook, and Apple, as well as enterprise federation and local accounts, giving external users flexible, familiar sign-in options while you keep security control.
03Does it secure external access, not just enable it?
Yes — it applies multi-factor authentication, conditional access, identity verification, and threat protection to external identities, so external-facing apps are secured against fraud and account takeover, not just made accessible.
04Can it scale to consumer volumes?
Yes — it is built to scale to consumer volumes for external-facing applications, so it suits public-facing apps with large, variable numbers of external users, not just a handful of partners.
05How does Faltrox operate it?
We design the branded external identity experience, configure the identity providers, MFA, and conditional access policy, and operate it — delivering managed external identity for your customer- and partner-facing applications.
Start an engagement
Secure what’s next.
Speak with the engineering team to define scope, walk through the methodology, and decide whether Faltrox is the right team to test and run your environment.
Contact us