Managing external identities to enable secure access for partners, customers, and other non-employees
Request for OnAccountCreated / OnUserCreated Event in Entra External ID
Re: https://learn.microsoft.com/en-us/entra/external-id/customers/concept-custom-extensions
I’ve been working with Microsoft Entra External ID (Customer) and looking into custom authentication extensions. One limitation I’ve run into is the lack of an “OnAccountCreated” (or “OnUserCreated”) event in the user flow.
There are two main scenarios where this would be valuable:
Database enrichment – I need to run logic as soon as a new account is created in the directory to keep my downstream systems in sync.
Group assignment – I’d like to automatically add new users to security groups at creation time. This would let me leverage group-based access control at the Enterprise Application layer, instead of pushing that responsibility into each of my applications.
At present, the available extension points (“before collecting information” and “when user submits information”) don’t provide this capability, which forces workarounds like background jobs or dynamic groups.
Are there any plans to introduce additional extension events, specifically an OnUserCreated hook?
On a related note, it would be really helpful if Microsoft could publish a clear roadmap for External ID. That way, organisations can better evaluate whether to adopt it now or wait until these key extensibility and governance features are available.
Thanks!