# B2E and B2C provisioning with self-registration

*Platform Identity and Access Management Architect Study Guide · Accepting Third-Party Identity in Salesforce · Last updated October 16, 2026 · https://www.certifyforce.com/study-guide/identity-and-access-management-architect/accepting-third-party-identity-in-salesforce/b2e-and-b2c-provisioning-with-self-registration*

How to provision employees from a corporate directory and consumers who exist in no directory: SCIM connectors and JIT for B2E, and for B2C self-registration with business or person accounts, the Configurable Self-Reg Page and its handler, the self-registration controller, micro-batching and headless registration.

- Certification: Salesforce Platform Identity and Access Management Architect
- Exam section: Accepting Third-Party Identity in Salesforce
- Study guide: https://www.certifyforce.com/study-guide/identity-and-access-management-architect

**Official exam objective:**

> Given a scenario, recommend the most appropriate way to provision users from identity stores in business-to-employer (B2E) and business-to-consumer (B2C) scenarios.

## What the exam expects

- Choose how to provision employees (B2E) from the directory that already holds them: a SCIM-capable connector or SAML just-in-time (JIT) provisioning.
- Choose how to provision consumers (B2C): self-registration on an Experience Cloud site, an authentication provider with a registration handler, or headless registration for a branded app.
- Pick business accounts or person accounts for self-registered users.
- Configure the Configurable Self-Reg Page and extend its handler; know when to customize `CommunitiesSelfRegController` and when to batch registrations.

Key terms: **B2E** (employees whose identity lives in a corporate directory); **B2C** (consumers who usually exist in no company directory); **self-registration** (visitors create their own site user); **Configurable Self-Reg handler** (the generated Apex class behind the Configurable Self-Reg Page); **micro-batching** (asynchronous, batched self-registration).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| SCIM | REST create, read, update and disable on SCIM endpoints with an OAuth 2.0 access token | [Manage Identities with SCIM](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_overview.htm&language=en_US&type=5) |
| JIT timing | Creates the user the first time they log in with a SAML IdP | [JIT Provisioning for SAML](https://help.salesforce.com/s/articleView?id=xcloud.sso_jit_about.htm&language=en_US&type=5) |
| Identity Connect | Security updates only; no replacement | [Identity Connect Retirement](https://help.salesforce.com/s/articleView?id=000390663&language=en_US&type=1) |
| Customer Identity licenses | External Identity license or Community license | [Salesforce Customer Identity](https://help.salesforce.com/s/articleView?id=xcloud.identity_about_customers_partners.htm&language=en_US&type=5) |
| Person accounts | B2C registrants get one record merging account and contact | [Person Accounts for Self-Registration](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_self_registration_person_accounts.htm&language=en_US&type=5) |
| Configurable Self-Reg availability | Not available when the login page type is Experience Builder | [Configurable Self-Reg Page](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_discovery_create_config_self.htm&language=en_US&type=5) |
| Verification None | Include Password must be selected, or users can't log in | [Configurable Self-Reg Page](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_discovery_create_config_self.htm&language=en_US&type=5) |
| Custom errors | `Auth.DiscoveryCustomErrorException`; custom label up to 200 characters | [Custom Error Messages](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_self_registration_custom_error.htm&language=en_US&type=5) |
| Controller override | `CommunitiesSelfRegController` settings override Login & Registration | [Self-Registration Apex Controller](https://help.salesforce.com/s/articleView?id=experience.networks_self_reg_apex.htm&language=en_US&type=5) |
| Micro-batching | Asynchronous batches; email with login instructions after success | [High-Volume Self-Registration](https://help.salesforce.com/s/articleView?id=experience.exp_cloud_high_volume_self_reg_apex.htm&language=en_US&type=5) |
| Headless identity | Requires an Experience Cloud site; customers and partners only | [Headless Identity](https://help.salesforce.com/s/articleView?id=xcloud.headless_identity_customers_overview.htm&language=en_US&type=5) |

## Check yourself

- Why can't standard SAML JIT replace Identity Connect for deprovisioning?
- When must Include Password be selected on the Configurable Self-Reg Page?
- Which Apex exception customizes the error a refused registrant sees?
- When does a headless registration still need an Experience Cloud site?

## Sources

- [Salesforce Customer Identity](https://help.salesforce.com/s/articleView?id=xcloud.identity_about_customers_partners.htm&language=en_US&type=5)
- [Use the Configurable Self-Reg Page for Easy Sign-Up](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_discovery_create_config_self.htm&language=en_US&type=5)
- [Configure Self-Registration](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_self_registration_configure.htm&language=en_US&type=5)
- [Extend the Configurable Self-Reg Handler in Apex](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_login_discovery_review_config_code.htm&language=en_US&type=5)
- [Create Custom Error Messages in the Configurable Self-Reg Handler](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_self_registration_custom_error.htm&language=en_US&type=5)
- [Configure Person Accounts for Self-Registration](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_self_registration_person_accounts.htm&language=en_US&type=5)
- [Customize the Self-Registration Apex Controller](https://help.salesforce.com/s/articleView?id=experience.networks_self_reg_apex.htm&language=en_US&type=5)
- [Use Apex to Configure Self-Registration in Batches for High-Volume Sites](https://help.salesforce.com/s/articleView?id=experience.exp_cloud_high_volume_self_reg_apex.htm&language=en_US&type=5)
- [Headless Identity for Customers and Partners](https://help.salesforce.com/s/articleView?id=xcloud.headless_identity_customers_overview.htm&language=en_US&type=5)
- [Manage Salesforce User Identities with SCIM](https://help.salesforce.com/s/articleView?id=xcloud.identity_scim_overview.htm&language=en_US&type=5)
- [Just-in-Time Provisioning for SAML](https://help.salesforce.com/s/articleView?id=xcloud.sso_jit_about.htm&language=en_US&type=5)
- [Just-in-Time SAML Assertion Fields for Experience Cloud](https://help.salesforce.com/s/articleView?id=xcloud.sso_jit_community_requirements.htm&language=en_US&type=5)
- [Configure an Authentication Provider Using OpenID Connect](https://help.salesforce.com/s/articleView?id=xcloud.sso_provider_openid_connect.htm&language=en_US&type=5)
- [Identity Connect Retirement](https://help.salesforce.com/s/articleView?id=000390663&language=en_US&type=1)
- [Identity Connect](https://help.salesforce.com/s/articleView?id=xcloud.identityconnect_about.htm&language=en_US&type=5)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 11 linked practice questions, and unlimited timed mock exams are included with the Platform Identity and Access Management Architect pack (USD $19): https://www.certifyforce.com/practice-exams