** ⚠️ 预览/示例** — JIT 密码迁移机制的示例实现。

通过批量用户导出/导入和首次登录时无缝密码迁移（JIT），将用户从 Azure AD B2C 迁移到 Microsoft Entra 外部 ID。

🤖 与GitHub Copilot的使用

这个仓库包含一个Copilot技能——用VS Code打开仓库，让Copilot一步步指导你：

• “为我的租户设置B2C迁移”
• “在简单模式下运行导出/导入”
• “配置JIT密码迁移”
• “部署迁移工作者到 Azure”
• “将我的B2C应用MyWebApp迁移到外部ID”
• “将我的B2C API连接器转换为外部ID CAE”

该技能涵盖了完整的工作流程：设置、批量迁移、JIT 配置、本地测试、部署、监控，以及应用和 API 连接器迁移。

⚡ 快速启动

选项A — 交互向导（推荐）：

选项B — 手动设置：请参阅运行手册中的逐步说明。

Prerequisites： .NET 8.0 SDK， PowerShell 7+， Azure CLI， VS Code with Azurite extension.

迁移模式

| |简单模式****高级模式 | |—|—|—|

Azure AD B2C to Entra External ID Migration Kit

⚠️ PREVIEW/SAMPLE — Sample implementation of the JIT password migration mechanism.

Migrate users from Azure AD B2C to Microsoft Entra External ID with bulk user export/import and seamless password migration on first login (JIT).

🤖 Use with GitHub Copilot

This repo includes a Copilot skill — open the repo in VS Code and ask Copilot to guide you step by step:

• “Set up B2C migration for my tenant”
• “Run the export/import in Simple Mode”
• “Configure JIT password migration”
• “Deploy migration workers to Azure”
• “Migrate my B2C app MyWebApp to External ID”
• “Transform my B2C API connectors to External ID CAE”

The skill covers the full workflow: setup, bulk migration, JIT configuration, local testing, deployment, monitoring, and app & API connector migration.

⚡ Quick Start

Option A — Interactive wizard (recommended):

.\scripts\Setup-Migration.ps1

Option B — Manual setup: See the Runbook for step-by-step instructions.

Prerequisites: .NET 8.0 SDK, PowerShell 7+, Azure CLI, VS Code with Azurite extension.

Migration Modes

Both modes create users with random passwords + RequireMigration flag. JIT password migration (Azure Function) handles the real password on each user’s first login:

graph LR
    User[User Login] -->|First login| ExtID[Entra External ID]
    ExtID -->|Custom Auth Extension| JIT[Azure Function]
    JIT -->|Validate password via ROPC| B2C[(Azure AD B2C)]
    JIT -->|MigratePassword| ExtID
    style JIT fill:#107c10,color:#fff

Key Features

• Two bulk migration modes — Simple (export/import) or Advanced (queue-based parallel workers)
• JIT password migration — seamless first-login password transfer via Custom Authentication Extension
• MFA phone registration — migrate phone numbers at throttle-safe rates (Advanced Mode)
• App & connector migration — export B2C app registrations and transform API connectors to CAEs