Questions tagged [azure-ad-b2c-custom-policy]

Azure AD B2C custom policies are configuration files for defining Azure AD B2C tenant. They are commonly used for addressing complex scenario that cannot be addressed through user flows.

Sample scenarios https://github.com/azure-ad-b2c/samples/tree/master#sample-scenarios

To provide product feedback, visit the Azure Active Directory B2C Feedback page.

1054 questions
3
votes
3 answers

Localization in Custom Policy Azure B2C

I have localized DisplayName and UserHelpText (like shown below). How to localize the email pattern HelpText ("The email you provided is not valid")? Please advise Please enter your email
Baloon1985
  • 89
  • 2
  • 9
3
votes
2 answers

Azure AD B2C - Populating email in input claim from previous orchestration step and Verify.email not working alongwith

First orchestration step is login- taking email output claim Second step is email verify- I want to populate email from login and verify with email OTP. Problem- If email populated, verify button does not come. If verify button comes, email not…
2
votes
1 answer

Cypress test setup for Azure AD B2C login with custom policy

Setup Azure AD B2C with custom policies (B2C_1A_SIGNIN) React frontend MSAL to implement the authentication (@azure/msal-browser: 2.37.0, @azure/msal-react:1.5.7) - using loginRedirect() (no MFA) Cypress (v12.5.1) for e2e tests What I did I…
2
votes
0 answers

Azure AD B2C Custom policy : How to store client id and client secret securely and use in REST api

I want to call below endpoint using custom policy REST API call technical profile https://{tenant}.b2clogin.com/{tenant}.onmicrosoft.com/B2C_1A_SIGNUP_SIGNIN/oauth2/v2.0/token This api requires client id and client secret to be passed as form…
Rajendra Thorat
  • 3,248
  • 3
  • 15
  • 24
2
votes
1 answer

Dont write new B2C account to directory until validation technical profile is complete

I am creating a custom policy in Azure B2C. This policy currently allows a user to signup for an account, after which we validate some info from the user and write a custom claim into the user object via an API call. At the moment the user object is…
2
votes
1 answer

How to include custom claim in access token with Azure AD B2C custom policy and MSAL?

I have Azure B2C configured with custom policies to allow signups and sign ins of local accounts and multi-tenant Azure AD. The UI is Angular using MSAL with a .NET Core Web API backend. The custom policy defines a custom claim named clientIds that…
Roger
  • 2,118
  • 1
  • 20
  • 25
2
votes
1 answer

Azure Active Directory B2C AADB2C90051: No suitable claims providers were found

I have created custom policies with SSO and account migration (you can view them on GitHub here, Note: I removed/edited values for security reasons). I want users to be able to sign in with a social provider OR local account for the first time. I…
2
votes
2 answers

How can I get a value of an open / directory extension in an Azure AD B2C custom policy?

I'm using Microsoft Graph API to set a custom value (string) on a user. I've tried using both open & directory extensions to store the data and both seem to work fine in the API level as I'm able to get the data back on a user. What I'm trying to do…
2
votes
1 answer

Azure B2C custom policy Auth app - totpIdentifier issue

I have created a custom policy to use the Authenticator App from the following example code: https://github.com/azure-ad-b2c/samples/blob/master/policies/totp/policy/TrustFrameworkExtensions_TOTP.xml The issue I am having is that it will sign up a…
366Cobra
  • 29
  • 4
2
votes
1 answer

Azure B2C Custom Policy , Add Custom User Attribute in Output Claims

I have created custom policy for Interactive login in Azure AAD B2C The Sign In / Sign Up works fine However now I added Custom User Attribute in my B2C thru Portal, and updated so my custom policy also for "extension_UserRole" custom policy However…
2
votes
1 answer

Regionalization of Verification Code Calls During Sign-In

We're using Azure AD B2C with custom policies on one of our projects. We enable mobile phone 2FA for all our users. When a user signs in, they have the option of having their verification code sent via text message or phone call. If they choose…
Adrian Thompson Phillips
  • 6,893
  • 6
  • 38
  • 69
2
votes
3 answers

Azure B2C social logon with Twitter - AuthorizationError

I am setting up Twitter as a social login option following this doc reference on auto-account-link policies. It's been quite some time since I've finished the policy side but keep consistently getting the authorization error below: correlationId:…
2
votes
1 answer

Azure B2C You are already registered, please press the back button and sign in instead

I have created a custom B2C_1A_SIGNUP_SIGNIN Policy. Used Google Authentication. When I hit the create button mypersonaltenantid gets validated through a Azure Function. I am presented the error message You already registered, please press back…
Daniel
  • 9,491
  • 12
  • 50
  • 66
2
votes
1 answer

Azure Ad B2C - Output Claims do not return email address as a single value, but an array instead

For some reason Azure B2C returns an email_addressess claim instead of the standard open id policy spec claim for email. "email" or "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress". Why is this? It should return this along with…
Arra
  • 43
  • 1
  • 6
2
votes
2 answers

AADB2C90304: User journey went into a bad state. Claims exchange with id 'LocalAccountSigninEmailExchange' could not be found in orchestration step

I have a custom policy based on SocialAndLocal sample. It adds 2 ClaimsTransformation steps in front. This are steps 3 and 4:
Jakub Bochenski
  • 3,113
  • 4
  • 33
  • 61