Questions tagged [azure-ad-b2c-custom-policy]

Azure AD B2C custom policies are configuration files for defining Azure AD B2C tenant. They are commonly used for addressing complex scenario that cannot be addressed through user flows.

Sample scenarios https://github.com/azure-ad-b2c/samples/tree/master#sample-scenarios

To provide product feedback, visit the Azure Active Directory B2C Feedback page.

1054 questions
1
vote
0 answers

Azure B2C Custom Policies: How to disallow sending verification email to already verified email addresses (login with username)

I have a problem with Azure B2C and custom policies: I set B2C to use username instead of email address as explained in the example username-signup-signin. My problem is that during the signup, the verification email can be sent to any email…
1
vote
1 answer

How can I make my custom policy recognize the token generated by my Azure AD B2C user flow?

My current application has an Azure AD B2C user flow for log in and I created a custom policy to change some details about the account. The custom policy is working well when tested in the Azure, but in the application, the token generated by the…
1
vote
1 answer

XML error with custom policy adding forgot password XML logic

I have a working sign up or sign in Azure B2C page using a custom policy. I'm now trying to get the 'forgot password link' to work. I've followed all steps in…
KevinUK
  • 5,053
  • 5
  • 33
  • 49
1
vote
0 answers

how to parse parameters from graph in Azure AD B2C custom policy?

this is a very simple question. I have the following response from a rest api: { "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users(lastPasswordChangeDateTime)", "value": [ { "lastPasswordChangeDateTime":…
1
vote
0 answers

Azure AD B2C revoke sso session and refresh token

I'm currently trying to revoke the sso session (using the sample here https://github.com/azure-ad-b2c/samples/tree/master/policies/revoke-sso-sessions) and revoke and refresh token user journey from the starter pack…
1
vote
2 answers

Some of B2C custom policy samples are single file

I understand that it is recommended to break down Custom policy definition xml files into multiple file as shown in the starter packs: TrustFrameworkBase.xml TrustFrameworkExtensions.xml TrustFrameworkLocalization.xml SignUpOrSignin.xml ... other…
Allan Xu
  • 7,998
  • 11
  • 51
  • 122
1
vote
1 answer

Azure AD B2C - Use CombinedSignInAndSignUp after a ClaimsProviderSelection step

I'm creating a custom policy where the user can choose if he wants to signin using a local account or a social account, but instead of showing the local account form in the first page, i want a button to be clicked and then i want to show the…
julianomontini
  • 325
  • 4
  • 18
1
vote
0 answers

Azure AD B2C - Button to SignIn with local account

I'm trying to set up a login page that offers both local and social sign-in options. However, I don't want to show the username and password form on the first page. Instead, I'd like to display a button that says "Sign in using email" and takes the…
julianomontini
  • 325
  • 4
  • 18
1
vote
1 answer

Allowing multiple, user-selectable MFA registration methods with Azure AD B2C user flows or custom policies

Is it possible to have multiple, user-selectable registration methods when users sign up for multi-factor authentication (MFA) in Azure AD B2C? E.g., primary and secondary MFA registration methods. Here is an example: We know it is possible to have…
1
vote
0 answers

B2C - Impersonate Custom Policy - Is it possible to return any other value other than email of impersonated user?

I have the basic user impersonation policy defined here https://github.com/azure-ad-b2c/samples/tree/master/policies/impersonation working fine. An admin with the can_impersonate attribute set to true can login as that user and then the…
1
vote
1 answer

Resource '' does not exist or one of its queried reference-property objects are not present

I've created a custom User Attribute called "role" in Azure AD B2C. I'm trying to update this using Microsoft.Graph 5.6.0 using this documented approach: var user = new User { AdditionalData = new Dictionary { {…
1
vote
2 answers

Logout_hint parameter not being added to AAD identity provider logout URL in B2C custom policy

I am trying to add a logout_hint parameter to the logout URL for a B2B identity provider in an Azure AD B2C custom policy. I have verified that the login_hint parameter is being added correctly to the user's token claims, and have checked that the…
1
vote
0 answers

Azure-b2c Twilio MFA call option

We're trying to integrate Twilio sms and call instead of default azure-b2c call/sms option. SMS works fine, however I am having a hard time setting up call option within custom policy. Our flow is to call user and have them press # key. How can I on…
1
vote
1 answer

How to implement a user flow with email verification after completing the registration form?

The default user flows in Azure AD B2C require the user to first confirm his mail address before completing the registration form: That's not the standard registration behaviour we normally see on today's registrations. How can I configure (or…
stefan.at.kotlin
  • 15,347
  • 38
  • 147
  • 270
1
vote
2 answers

Azure AD B2C: How to reorder idp´s in the template?

for me it is not clear how i can achieve the order of the idp´s in azure ad b2c. In the documentation it is mentionend that the i can control the order of the idp´s by the policy: When i look into the classic template it injects the social idp´s on…
rubeonline
  • 1,230
  • 10
  • 18