使用刷新 token 的 Azure Active Directory B2C 定价说明

Question

我对 Azure AD B2C 定义的定价结构感到困惑 here 。这个问题似乎是从这个描述中产生的:

Authentications: Tokens issued either in response to a sign-in request initiated by a user, or initiated by an application on behalf of a user (e.g. token refresh, where the refresh interval is configurable).

在我的租户/应用程序的 Azure AD B2C 设置中，我定义了一个登录策略，然后提供了访问/ID token (最长 24 小时)、刷新 token (最长 90 天)和刷新 token 的生命周期选项。然后刷新滑动窗口边界(最长 365 天或无到期日)。这与我根据身份验证定价收取的身份验证费用有何关系？

例如，如果我将访问/ID token 设置为 24 小时，将刷新 token 设置为 90 天，并且我使用 MSAL 库来 AcquireTokenSilentlyAsync，并且我有一个每天进入应用程序的用户，我是否会被收取 30该用户每月需要进行 1 次身份验证，还是因为刷新 token 尚未过期而仅进行 1 次身份验证？

这在成本以及我是否可以使用 B2C 来满足我的应用身份验证需求方面产生了巨大的差异。例如，对于 100,000 名每日用户，如果我每月仅收取 1 次身份验证费用，如果我的刷新 token 设置为 90 天，那么最终每月平均花费约 50 美元，而如果每 24 小时收取一次身份验证费用，我将花费大约 50 美元。每月将被收取6300美元!如有任何对此的澄清，我们将不胜感激。

Answer 1

我收到了来自 Microsoft Azure 支持的答复，如下:

I have reviewed your case and I understand that you have query regarding B2C Pricing. I would like to inform you that, the Tokens issued either in response to a sign-in request initiated by a user, or initiated by an application on behalf of a user. Please find the pricing details as mentioned below: https://azure.microsoft.com/en-us/pricing/calculator/?service=active-directory-b2c So if the user or an application, sign-in’s per day one time, hence, it would be charged 30 authentications for that user per month and Also, upto First 50,000 user or an application sign-in’s are free

我发送了后续澄清:

So, just for clarification, even if it is the refresh token that is used (which is good for 90 days if setup that way), that still charges as an 'authentication'? This makes B2C extremely expensive and there is no way that the Real Madrid example case is true, as they would be spending $10,000,000 a year or more just for authentications. Microsoft will never get indie developers to be able to use this, and it will be out of the price range of most medium businesses as well. It is nowhere near competitive with Auth0, which for 50k users a month and UNLIMITED authentications, costs just $850.

并收到以下回复:

Your suggestion are really important for us to make improvements for our product and services. I would recommend that you open the feedback link and provide us your valuable feedback. All of the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Windows Azure.

https://feedback.azure.com/forums/223579-azure-portal/suggestions/18796606-lower-the-price-of-ad-b2c

https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/10986063-reduce-pricing-for-azure-ad-b2c

https://feedback.azure.com/forums/34192--general-feedback/suggestions/15434943-azure-active-directory-b2c-don-t-charge-for-token

如果您查看这些反馈，就会发现他们在一年内没有获得太多投票或采取行动，因此，如果您希望 B2C 作为独立开发者或中小型公司的可行选择，请投票!