Questions tagged [azure-ad-b2c-custom-policy]

Azure AD B2C custom policies are configuration files for defining Azure AD B2C tenant. They are commonly used for addressing complex scenario that cannot be addressed through user flows.

Sample scenarios https://github.com/azure-ad-b2c/samples/tree/master#sample-scenarios

To provide product feedback, visit the Azure Active Directory B2C Feedback page.

1054 questions
1
vote
0 answers

Difference between CombinedSignInAndSignUp with api.signuporsignin vs ClaimsProviderSelection with api.idpselections

I'm wondering if there is any difference between following sets of orchestration steps: CombinedSignInAndSignUp with api.signuporsignin
kamilz
  • 168
  • 1
  • 12
1
vote
0 answers

Azure AD B2C - authorization code grant, profile_info response

I'm using Azure AD B2C with Authorization code grant. In the response after exchaning code for token, there is additional property profile_info with JSON encoded as Base64. { "id_token": "", "token_type": "Bearer", …
kamilz
  • 168
  • 1
  • 12
1
vote
1 answer

ADB2C - The claims exchange 'SendOtp' specified in step '2' returned HTTP error response with Code 'BadRequest' and Reason 'Bad Request'

I am using 'DisplayControl_TrustFrameworkExtensions' custom policy in ADB2C to customize email templates. I have referred to this link to modify Custom policy. I am using the technical profiles below.
1
vote
0 answers

How to Use Send Grid to send a Confirmation Email with Azure B2C custom policy

I have a current policy that I need to send a confirmation email. I have a send grid account that is currently delivering a verification email and its working fine. In my password reset flow, this is what I have.
Bnd10706
  • 1,933
  • 5
  • 24
  • 39
1
vote
1 answer

User already exists with AlternativeSecurityId with another issuerUserId/issuerAssignedId

We're having a problem with AAD-UserWriteUsingAlternativeSecurityId because AlternativeSecurityId exists, but, it derivates from ClaimTransformations which has receive two InputClaims issuerUserId issuer The issue remains the same, but,…
1
vote
1 answer

First and Last Name Mandatory in B2C SignUp Policy

We are using B2C Custom Policies and just realized that there doesn't seem to be an easy way to make the first and last name fields mandatory. Has anyone else been able to figure this out? I have tried the following: Used a Restriction on the Name…
Anup Marwadi
  • 2,517
  • 4
  • 25
  • 42
1
vote
1 answer

Self service password change with TOTP confirmation

Based on samples available on Github (https://github.com/azure-ad-b2c/samples/tree/master/policies/totp) I have implemented policies for enabling TOTP MFA. Now, when the user wants to change his password (not reset via "Forgot your password?") I…
kamilz
  • 168
  • 1
  • 12
1
vote
1 answer

"ClaimsProviderSelection" is not working as expected

I have a user invitation custom policy, user will get an email with a link and that link will have a token. My requirement is I want to show two options to user: Change password Login with Other providers Below is my user…
Alex
  • 734
  • 6
  • 29
1
vote
0 answers

Forgot Username and Forgot Password in Custom Policy

I am new to Azure AD B2C custom policies. I need some guidance on how do we add Forgot Username and Forgot Password hyperlink in custom policy? I have tried with Localization String IDs, but somehow not able to achieve it. Any help will be really…
1
vote
2 answers

Can I apply MFA to each user in Azure ADB2C?

I used a custom policy to create the login screen. And we want to run MFA on a per user basis. For example, I have two user account.(user1, user2) User 1 wants to log in without using MFA. User 2 applies MFA and wants to log in. Both users then…
Pepe
  • 39
  • 6
1
vote
0 answers

Azure B2C One Time Password redirection

I'm new to azure b2c. I can't figure out why azure b2c gets redirected to a page which is an app outside the b2c environment instead of showing the error when user reaches the OTP retry limit. The OTP retry limit is set to 11 and after that it gets…
1
vote
1 answer

Azure AD B2C, Sendgrid - The requestor's IP Address is not whitelisted

I have integrated Send grid with the Azure AD B2C using Custom policies for sending the OTP codes. https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-email-sendgrid?pivots=b2c-custom-policy#create-azure-ad-b2c-policy-key The send…
1
vote
1 answer

Azure B2C sign in with username?

I'm pretty new working with B2C custom policies, and currently I'm trying to setup an integration with one client using SAML. That client is sending us their employeeId as ID in the SAML payloads. I got an integration working with okta with I'm…
Herberth Gomez
  • 187
  • 1
  • 2
  • 19
1
vote
2 answers

Azure B2C: KMSI feature does not work with custom policy

Our SPA uses Azure B2C and MSAL (React) for user authentication. There are other requirements so we use custom policies instead of predefined user flows. But I struggle to implement Keep Me Signed In (KMSI) feature following these instructions. I…
Svetlana
  • 163
  • 1
  • 15
1
vote
1 answer

Azure AD B2C not showing logins for custom app

Currently using Azure AD B2C as our authentication provider and we have a requirement to access logs of all user login activity for our custom application. If I navigate to the B2C portal, Users>Sign-in logs I only see sign ins for Application of…