Questions tagged [azure-ad-b2c-custom-policy]

Azure AD B2C custom policies are configuration files for defining Azure AD B2C tenant. They are commonly used for addressing complex scenario that cannot be addressed through user flows.

Sample scenarios https://github.com/azure-ad-b2c/samples/tree/master#sample-scenarios

To provide product feedback, visit the Azure Active Directory B2C Feedback page.

1054 questions
1
vote
1 answer

Azure AD B2C Custom Policy does not yield a valid Apple idp_access_token for the Apple revoke token endpoint

Apple currently has requirements of being able to delete a user account and revoke token permissions to have an app on their store: Endpoint Doc: https://developer.apple.com/documentation/sign_in_with_apple/revoke_tokens Additional Info:…
1
vote
1 answer

Any way to add support for Haitian Creole in B2C Localization

Have followed the guidance at Language customization in Azure Active Directory B2C to add localization for Azure AD B2C Custom Policy. No problems adding support for Spanish, Russian, etc. Our front end application also supports Haitian Creole that…
Scott
  • 729
  • 1
  • 11
  • 30
1
vote
2 answers

B2C - Tab Index incorrect for Sign In

Using User Flow or Custom Policy and creating a signup/sign in flow the TAB indexes are off for sign in screen. We use custom policies but this is an issue around the layout being used, I believe. Steps: Create a Sign Up/Sign In User Flow following…
Scott
  • 729
  • 1
  • 11
  • 30
1
vote
0 answers

Azure B2C - granting access to multiple “application tenants”

I am building an application which will use Azure B2C as the identity system. It will include some local accounts, and some federated accounts for Enterprise SSO logins. The application will have “application tenants”, representing customer…
1
vote
1 answer

Retrieve custom claim from federating IdP access token in Azure AD B2C custom policy

I am configuring an OIDC-based SSO flow in Azure AD B2C using custom policy to allow users to login to downstream applications with their federated identity provider's (IdP) credentials. Custom policy is used to allow some complex business logic to…
1
vote
1 answer

Sign Up via Graph API and verify if user is in control of email and phone number

I know it's possible to create Azure B2C users via Graph API. But is it also possible to trigger the email verification? And the phone verification? All from APIs?
Tobi
  • 109
  • 1
  • 1
  • 12
1
vote
0 answers

Azure AD B2C returns all the assigned roles

I'm integrating the SSO flow with azure AD B2C using custom policies and SAML. When decoding the JWT token we are getting all the roles that user had previously also.I only need is the current role of the user. Can anyone have solution to achieve…
1
vote
2 answers

Email Address Verification, in SubJourney with additional ValidationTechnicalProfile

We are trying to do Just In Time migration with the 'SubJourney' based password reset (e.g. forgot your password). I need to be able to migrate the user prior to resetting their password via a REST call. However, when I add the entry for our…
Sen
  • 1,438
  • 2
  • 12
  • 19
1
vote
1 answer

Feasibility of sidestepping Azure AD B2C custom policies in favour of Microsoft Graph API

I'm mid-way through a task to migrate a legacy .NET MVC app to use Single Sign On (SSO) to make integration with a to-be-developed mobile app possible. I'm planning on using Azure AD B2C to facilitate this and based on my research, I need to use…
ajbeaven
  • 9,265
  • 13
  • 76
  • 121
1
vote
0 answers

Azure AD B2C - Test user for automated testing

I am using Azure AD B2C Login and Registration user flow in my mobile app. These pages has MFA for the normal users. My question is, Can I create a test user which can skip the MFA(OTP via SMS) process without using Custom Policy.
1
vote
1 answer

Localization of 'UserMessageIfWrongCodeEntered' not working

I'm having problem locating the correct key for an error messages I want to localize to another language when using a custom policy. The message is when the user has entered the wrong TOTP-code. The english text is "Wrong code entered, please try…
Nait
  • 1,055
  • 1
  • 14
  • 19
1
vote
1 answer

Is it possible to force sign-out from external IdP federated with B2C

As of Microsoft documentation: Sign-out When you want to sign the user out of the application, it isn't enough to clear the application's cookies or otherwise end the session with the user. You must redirect the user to Azure AD B2C to sign out.…
1
vote
1 answer

Can MFA be switched on or off for a user based on an application setting in Azure AD B2C?

We are using Azure AD B2C login in our web application. We want to be able to set MFA for a B2C user based on a setting in the application. From the documentation, I can see that custom policies are able to be applied. But can the custom policy…
1
vote
1 answer

Forgot Password with REST API Connector: How to send email as input claim?

I am trying to send a user's email and password to a REST API as a part of the Forgot Password custom policy user journey. This serves a business need for us, as we are doing a staggered release of the B2C Client and need to temporarily keep our…
code_disciple
  • 182
  • 2
  • 17
1
vote
1 answer

AD B2C Invalid_grant Error during SignUp in Razor pages Web App

I am facing the below error in my Razor pages web application using Azure AD B2C during SignUp. "AADB2C90088: The provided grant has not been issued for this endpoint. Actual Value : B2C_1A_SIGNIN and Expected Value : B2C_1A_SIGNUP" I am using…