Microsoft Entra External ID Features

Enables a seamless customer experience with self-registration and self-service functions, including account creation and preference management.

Verifies user identity with authentication, which may include multiple multi-factor authentication methods.

Scales to support growing a customer base.

Captures and manages a customer's consent and preferences to comply with data privacy laws such as GDPR and CCPA.

Offers users the option to sign in with social media accounts.

Integrates with directories or other data stores that house customer data to create a complete view of a customer.

Control and manage access to company resources

Extra layer of security that requires not only a password and username but also something specific to that user

Possesses AI-driven triggers to determine when to require MFA or stronger authentication rather than always requiring it.

Builds profiles of known devices/environments per user and flags deviations such as new devices, new networks, and/or suspicious locations as higher risk.

Spot fraudulent behavior, such as account takeover attempts, credential stuffing, bots, and brute force attacks through the use of AI.

Uses machine learning to analyze past authentication events and suggest optimizations to security policies (e.g. thresholds, triggers) or to adjust rules over time.

Leverages AI to assign a risk score to a login attempt based on context, device, IP, historical patterns to dynamically decide whether to prompt for MFA, additional challenges, or allow seamless login.

Monitors behavioral signals including typing patterns, mouse movement, and/or touch/swipe dynamics to verify user identity either at login or continuously after login.

Uses computer vision, facial recognition, or other biometrics during onboarding or at risk events, with AI-based liveness checks to prevent spoofing or replay attacks.

Generates dynamic prompts to guide users through account recovery workflows.

Implements artificial intelligence to filter, rewrite, or block prompts that attempt to access unauthorized data, escalate privileges improperly, exploit system weaknesses, or otherwise re-provision customer access permissions.

Notifications that are delivered to users as soon as an event occurs

Verify user access rights within systems to confirm each user has appropriate and authorized access to resources

Track and analyse user behavior within a system or network

Online portal through which end users can access the system, manage tasks, or obtain information

Use AI to generate content in the form of text, images, videos, etc.

Authenticate user identities through different methods such as ID cards, PINs, passwords, RFID, and biometrics

Create, modify, disable, or delete user accounts and their profiles across IT infrastructures

Protect sensitive data for digital privacy

View and track pertinent metrics to find patterns and gain insights from data

Allow users to access multiple services after entering their login credentials once

The system can automatically recognize a user and/or device

Store, modify, and track user accounts and access in a centralized directory

Enable end users to request access or request changes to their account privileges

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users