Azure AD B2C add parameter in reply url

Question

Is there a way to add a specific value to a reply url (not included in the token) in order to manage a specific workflow. Example, invitation process in which :

we call in a sign-in or sign-up policy and we put in the url a parameter a custom key (related to the invitation)
if sign-in or sign-up succeed, the reply url will also return the custom key

I don't know if it's possible or another possibility exists...

Thanks in advance

score 2 · Accepted Answer · answered Feb 24 '17 at 11:11

2

Is there a way to add a specific value to a reply url (not included in the token) in order to manage a specific workflow.

Please take a look at state parameter. You can use this parameter to send arbitrary data as part of your request and it gets returned back to you in response.

From the documentation link:

answered Feb 24 '17 at 11:11

Gaurav Mantri

128,066
12
206
241

1

OK no potential risk for using this paramater in this way ? – Cedric G. Feb 27 '17 at 08:52
Can you please clarify what you mean by potential risk? – Gaurav Mantri Feb 27 '17 at 08:58
I don't know, it's specified that it is generally used for putting the state or to prevent cross-site request attack... But the sentence "it can be string of any content that you want" is quite clear – Cedric G. Feb 27 '17 at 09:39
@user1523812 - yes, it needs to be signed or encrypted. See [this SO post](https://stackoverflow.com/a/47929148/185123) – spottedmahn Apr 16 '18 at 00:58

Azure AD B2C add parameter in reply url

1 Answers1