Description:

We would like to request native support in Power Pages for a passwordless “magic link” sign‑in experience using Azure AD B2C. The scenario involves sending customers an emailed link that silently authenticates them into the Power Pages site without requiring credential re‑entry.

Currently, this can only be achieved through a fully custom Identity Experience Framework (IEF) policy with JWT/id_token_hint claims exchange and custom token logic. While technically feasible, this approach requires significant engineering effort and ongoing maintenance.

Business Scenario:

Our customers often need seamless access to Power Pages without repeated credential prompts. For example, a business may want to send a personalized link that not only signs the user in but also directs them to a pre‑configured experience such as a shopping cart or a tailored landing page. A native passwordless link would reduce friction, improve adoption, and enhance user satisfaction.

Desired User Experience:

• Customer clicks the emailed link
• They are silently signed in via Azure AD B2C
• No additional credential prompts or manual steps

Benefits of Native Implementation:

• Reduced engineering effort and complexity
• Consistent security practices aligned with Microsoft standards
• Easier adoption for organizations without deep expertise in custom B2C policies
• Improved customer experience and higher engagement

Security Considerations:

We understand the importance of strong security controls (short token lifetimes, one‑time use enforcement, replay protection, HTTPS delivery, audit logging). A native feature could embed these best practices by default, ensuring secure implementation across all tenants.