Carestream IDMS Solution Architecture v2 integrates Microsoft Entra ID for internal employees and Microsoft Entra External ID for customer identity, replacing legacy Azure AD B2C with modern OAuth and SAML protocols. Authentication flows through func-app-csi-auth-extension-api and RBAC Function App, while the Admin Web API orchestrates user, group, and role management via WebJobs sync fleet targeting Azure Cosmos DB and Azure SQL Database. Data synchronization pipelines leverage Service Bus queues and timer-triggered functions to backfill assets to Alibaba OSS S3-compatible storage and SFTP targets, with full observability through Application Insights. This architecture demonstrates a phased migration from legacy B2C to Entra External ID while maintaining multi-tenant identity governance and hybrid data residency. Fork and customize this diagram to model your own identity platform consolidation or external customer onboarding workflows.