Troubleshooting Microsoft Entra B2C Directory Deletion Issues: A Practical Guide

Table of Contents

This article addresses a common issue encountered when attempting to delete a B2C directory within Microsoft Entra ID. Specifically, it focuses on the error message: “Cannot delete ‘<contoso>‘. The following issue(s) prevent deletion of the directory: Directory contains one or more applications that were added by a user or administrator.” This guide provides a practical, step-by-step resolution to overcome this obstacle and successfully delete your B2C directory.

Symptoms¶

When you initiate the deletion process for a B2C directory in your Microsoft Entra environment, you might encounter the following error message, preventing the directory from being removed:

Cannot delete ‘<contoso>‘
The following issue(s) prevent deletion of the directory:
Directory contains one or more applications that were added by a user or administrator

This error indicates that the directory deletion is being blocked by the presence of applications within the B2C directory. These applications, often added by users or administrators, must be removed before the directory itself can be deleted.

Cause¶

The root cause of this issue lies in the presence of specific B2C application service principals that are designed to support core functionalities within your B2C directory. These service principals, which may include components like CPIM (Custom Policy Identity Management), the Ibiza Portal (Azure portal interface), and SSPR (Self-Service Password Reset), are essential for the operation of your B2C environment. However, they can inadvertently block directory deletion if not properly addressed.

Essentially, the system identifies these applications as dependencies or active components within the directory. To ensure the integrity and prevent unintended consequences, Microsoft Entra ID prevents directory deletion until these dependent applications are explicitly removed. This mechanism safeguards against accidental deletion of a directory that is still considered to be in active use or contains essential resources.

Resolution¶

To successfully delete your Microsoft Entra B2C directory and resolve the aforementioned error, you need to remove the applications that are preventing the deletion. This process involves a two-step approach within the Azure portal, focusing on removing applications listed in the Azure AD B2C dashboard and then proceeding with the directory deletion itself.

Step 1: Delete All Applications Listed on the Azure AD B2C Dashboard¶

The first crucial step is to identify and delete all applications registered within your Azure AD B2C directory. These applications are typically visible within the Azure AD B2C dashboard in the Azure portal. Removing these applications is necessary to clear the dependencies that are blocking the directory deletion.

Step-by-step Instructions:¶

1. Sign in to the Azure portal: Begin by accessing the Azure portal using an account with administrative privileges within your Azure AD B2C directory. Navigate to https://portal.azure.com/ and enter your credentials.

   

2. Select your B2C directory: Once logged in, locate your display name in the upper-right corner of the Azure portal interface. Click on your name, and a directory selection panel will appear. From this panel, choose the specific directory that corresponds to your B2C directory. This ensures you are operating within the correct context for managing your B2C resources.

   Note: If you only have a single directory associated with your account, your Azure AD B2C directory might already be pre-selected. Verify that you are indeed in the correct B2C directory before proceeding.

   

3. Navigate to Azure AD B2C blade: To access the Azure AD B2C specific settings, you need to locate the Azure AD B2C blade within the Azure portal. In the lower-left corner of the portal, you will find a “More Services” button, often represented by three horizontal lines or a greater than symbol (>). Click on this button to expand the services menu. In the search bar that appears, type “B2C”. As you type, the list of services will filter, and you should see “Azure AD B2C” appear in the results.

   

4. Select Azure AD B2C: From the filtered search results, click on Azure AD B2C. This action will open the Azure AD B2C blade, providing you with access to manage various aspects of your B2C directory.

   

5. Access Applications settings: Within the Azure AD B2C blade, locate and select All settings. This will typically be positioned in the left-hand navigation menu or as a prominent option on the overview page. After selecting “All settings”, a new menu will expand, presenting a list of configurable options. From this list, choose Applications. This will take you to the section where you can manage the applications registered within your B2C directory.

   

6. Delete all applications: In the “Applications” section, you will see a list of all applications currently registered in your B2C directory. To proceed with directory deletion, you must remove each of these applications individually. For each application in the list:

   • Select the application you wish to delete by clicking on its name or row. This will open the application’s details page.
   • Within the application details page, locate and select Properties. This option usually resides in the left-hand navigation menu within the application blade.
   • In the “Properties” section, you should find a Delete button, often positioned at the top or in the command bar. Click the Delete button to initiate the deletion process for the selected application.
   • Confirm the deletion when prompted. Azure portal will typically ask for confirmation before permanently deleting an application. Ensure you understand the implications of deleting the application before confirming.
   • Repeat this process for every application listed in the “Applications” section until the list is empty.

   

Step 2: Delete the Azure AD B2C Tenant¶

Once you have successfully deleted all applications listed in the Azure AD B2C dashboard, you can proceed with the deletion of the Azure AD B2C tenant itself. With the application dependencies removed, the directory deletion process should now complete without encountering the previous error.

Step-by-step Instructions:¶

1. Navigate to Microsoft Entra ID blade: While still operating within your B2C directory in the Azure portal, locate and select the Microsoft Entra ID blade. This blade is the central management hub for your Azure Active Directory, including B2C directories. You can typically find it in the left-hand navigation menu or by searching for “Microsoft Entra ID” in the portal’s search bar.

   

2. Select Delete Directory: Within the Microsoft Entra ID blade, navigate to the Overview menu. On the “Overview” page, you should find an option labeled Delete Directory. Click on Delete Directory to initiate the directory deletion process.

   

3. Follow the portal instructions: After selecting “Delete Directory,” the Azure portal will guide you through the remaining steps required to delete the directory. These instructions may include:

   • Reviewing any remaining resources or dependencies.
   • Confirming that you understand the implications of deleting the directory.
   • Potentially requiring you to enter the directory name to confirm your intent.

   Carefully follow all instructions presented by the Azure portal to ensure a successful and complete directory deletion. Once you have completed these steps, your Microsoft Entra B2C directory should be successfully deleted.

By following these two steps, you should be able to resolve the error and successfully delete your Microsoft Entra B2C directory. Remember to ensure you have removed all applications from the B2C dashboard before attempting to delete the tenant.

Feel free to leave a comment below if you have any questions or encounter further issues during this process!