Questions tagged [azure-ad-b2c-custom-policy]

Azure AD B2C custom policies are configuration files for defining Azure AD B2C tenant. They are commonly used for addressing complex scenario that cannot be addressed through user flows.

Sample scenarios https://github.com/azure-ad-b2c/samples/tree/master#sample-scenarios

To provide product feedback, visit the Azure Active Directory B2C Feedback page.

1054 questions
1
vote
1 answer

Extract boolean element from JSON with custom policy

I want to ask if there is a way to extract a boolean element from a JSON response from REST API. I have a claim that contains a JSON: { "customerEntity": { "role": { "id": 1 } }, "settings": { …
waanderer
  • 157
  • 1
  • 1
  • 11
1
vote
1 answer

How to set up multiple SSO IdPs in AD B2C?

I have an application that uses AD B2C for authentication. I need to allow external IdPs to authenticate via SSO into my application via AD B2C. I followed the steps in this documentation and it worked well for one IdP.…
1
vote
1 answer

What is the recommended approach for generating Azure AD Signin logs with passwordless azure B2C signin custom policy?

I am implementing a passwordless signin experience for local B2C account users with MFA credentials through Azure B2C custom policies. I am using AzureMfaProtocolProvider with a custom attribute stored phone number as an sms MFA option, and…
1
vote
1 answer

How can I verify the strongAuthenticationEmailAddress in a custom policy?

My users connect with a username and provide an email for password recovery, using the default combined signup/signin user flow configured for userId. To be clear, this is the email in the "Authentication contact info" section in B2C. I want my…
0xFF
  • 808
  • 1
  • 12
  • 33
1
vote
2 answers

Single Logout Implementation using ITfoxtec Library

We are trying to implement Single Logout functionality in Azure AD B2c using Itfoxtec Saml library. We have tried multiple configuration options but the SingleLogout method is not working as expected. We need a reference article or post on how to…
1
vote
1 answer

Why is Facebook referenced in TrustFrameworkBase.xml?

The documentation for Azure AD B2C says "Base file - Few modifications are required to the base". I expected to change just the TenantId and PublicPolicyUri at the beginning of the file. I was surprised to find that a Facebook ClaimsProvider is…
John Vottero
  • 845
  • 1
  • 7
  • 24
1
vote
0 answers

Social SignUp Email address field

I have a custom policy that allows local B2C account login and login via OpenIdConnect from Azure AD. When User from Azure AD is logging first time in he is redirected to sign up page. The issue is that all fields are filled automatically from the…
Pavel
  • 11
  • 1
1
vote
0 answers

Loop loading when trying to slect tenant when adding Azure AD Service Dependency - VS 2022

I've created a NET 6 web app to study how works the Azure AD B2C. So after doing all the configurations under Azure Portal, I went to Visual Studio 2022 to set the Service Dependency Service selection But when I select the "Microsoft Identity…
1
vote
1 answer

Looking up users in AAD B2C using extension attributes or unusual standard attributes

This is a follow-up to this question. I need to query AAD B2C to lookup a user using an employeeID which, for reasons related to what fields our account provisioning solution can deal with, is currently stored in the telephoneNumber field. I have…
1
vote
1 answer

SSO using Azure B2C with multiple custom policies with different domains

I have been several weeks on this now. I need to achieve the next scenario with Azure AD B2C custom subdomains: for example, having ssositeA.mydomain.com with custom policy b2c_1a_signin_siteA and ssositeB.mydomain.com with custom policy…
1
vote
1 answer

b2c - Guest account not a member

I'm usign custom policies in Azure. How to make any new account created as a visitor account and not a member please. Can someone explain the differences between Guest and Member? What are consequences when creating a user in B2C? Can't find it in…
1
vote
1 answer

How to pass custom code_verifier on msal 2.0 for Azure B2C?

Generally, MSAL 2.0 auto-generates the code and code_verifier by itself. But Here, I have my custom flow when half part is done on another code i.e. to generate code_challenge. But When I call from front-end I am unable to find a way that I can pass…
1
vote
1 answer

Is there a way to use Key Vault for custom policy?

In my custom policy I have a technical profile to call SendGrid API to send emails. Use SendGrid's email API to send the code the the user
1
vote
1 answer

Add Forgot password link to email signin with passwordless template

I would like to add a Forgot Password link to the email signin page, like so: I'm using the passwordless starter pack that splits Phone and Email signups/signins in different screens. My problem is that I cannot find the right place to make the…
LuisDev99
  • 1,697
  • 17
  • 13
1
vote
0 answers

Azure B2C user flows - accessibility issues on screen readers

We currently have issues to make the B2C user flows accessible from a screen reader perspective. All the DOM ingested by the MS user flows in junction with our html/css UI files makes impossible for a screen reader to don´t crash or work with…