Questions tagged [azure-ad-b2c]

Azure AD B2C is a cloud identity management solution for web and mobile applications targeting your customers (consumers and businesses).

Azure Active Directory B2C

Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available global service that scales to hundreds of millions of identities. Built on the same enterprise-grade secure platform as Azure AD, Azure AD B2C keeps your applications, your business, and your customers protected.

>> Get started with Azure AD B2C

Features

  • Email-based or username-based local accounts
  • Social identity providers (Facebook, Google, Microsoft and more)
  • Custom identity providers (OpenID Connect, SAML and more)
  • Built-in user journeys (sign up/sign in, edit profile, password reset)
  • Custom user journeys
  • Built-in and custom user attributes
  • Configurable application claims
  • User interface customization
  • Multi-factor authentication

Posting Azure AD B2C questions in Stack Overflow

The following tips will help you get quicker/better answers when posting Azure AD B2C questions:

5577 questions
9
votes
1 answer

AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: UntrustedRoot

I am performing a task to authenticate a Active-directory B2C instance in Azure from a local ToDo WebApp using a local WebAPI service. I have created 2 Apps App1 and App2, apart from adding a B2C instance in a trial-version subscription of Azure. In…
9
votes
1 answer

Authenticating tokens from multiple sources (e.g Cognito and Azure)

We're working on an API that allows users authenticating through a number of different providers. The individual providers are not an issue, but using them together is proving to be a challenge. It seems that adding more than 1 provider throws a…
Nino van der Mark
  • 622
  • 1
  • 9
  • 19
9
votes
1 answer

What does KMSI in Azure B2C actually DO?

We've got this document that explains how to set up Keep Me Signed In (KMSI) using Custom Policy: https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-policy-keep-me-signed-in OK, great, so we now know how to use (annoyingly complex)…
dapug
  • 1,781
  • 4
  • 22
  • 28
9
votes
1 answer

Azure AD B2C Authentication with Azure AD Multi-tenant

I have configured Azure AD multi-tenant autentication by following this article: https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-azure-ad-multi-tenant-custom?tabs=applications The authentication worked on friday last…
Frode
  • 540
  • 1
  • 6
  • 12
9
votes
2 answers

Custom Policies in Azure AD b2c - problems with Claims Provider guide

Trying to implement following scenario: implement Azure B2c and azure AD as one of identity providers. Only way to achieve it is using custom policies. I followed those…
Kamil Będkowski
  • 1,092
  • 4
  • 16
  • 36
9
votes
7 answers

Change Azure AD B2C SignOut URL (Change AzureADB2C/Account/SignedOut to custom URL)

I'm currently building a C# Net Core 2.2 app that is using Azure B2C OIDC for login/authentication. I've customized the login page and know how to customize the edit/forgot password screens with CSS and code hosted on my site using custom page…
Ian Nielson
  • 103
  • 1
  • 4
9
votes
1 answer

Receiving 403 error when accessing Azure function app locked down by Azure AD B2C

We are using AD B2C for authentication on our web app. Last week we started receiving a 403.76 when calling our APIs that are hosted in Azure and locked down by Active Directory using our AD B2C tenant. We haven't changed any config settings in AD…
9
votes
3 answers

AD B2C forceChangePasswordNextLogin for user flow "Sign in v2" doesn't initiate a password reset and prevents a successful login

I am creating new users in Azure AD B2C using the graph client api. The json i send to the api looks like the following: { "creationType": "LocalAccount", "passwordProfile": { "password": "a:898;keJPpN/69X", …
9
votes
4 answers

how do we renew idtoken using msal?

I am currently trying to develop an SPA application with a webapi, I am using msal for login. The flow is the user logs in, gets an idtoken (used to authorize for my api), gets an access token (for graph api) using acquiretokensilent method. I renew…
CKS
  • 497
  • 3
  • 9
  • 16
9
votes
2 answers

What is in the sub and oid claims when getting client_credentials tokens from the Azure AD OAuth v2 token endpoint?

I can get these tokens after setting up keys/secrets, but I don't know if or how I can rely on the sub claim in my app. For more background, my app is actually a B2C registered app and I'm going to the v2 endpoint in the B2C tenant, but with no…
sprobean
  • 171
  • 1
  • 2
  • 7
9
votes
2 answers

Azure Ad b2c : Add new member user with invitation

I have an Azure Ad b2c running up on Azure and I want to create user with inviations in B2C.I tried by creating Guest user but that user is unable to login. because that user is created as B2B user. I also tried by adding user manually. but I am…
Tejinder Singh
  • 1,070
  • 2
  • 8
  • 24
9
votes
2 answers

Authenticating to Azure AD with Self Signed Certificate using Xamarin Forms

Can anyone give me the background on how to Authenticate Azure AD in Xamarin Forms iOS & Android apps with azure self signed certificates. I am trying to authenticate to azure AD without credentials,I have give a certificate for authentication but I…
Nitha Paul
  • 1,401
  • 1
  • 14
  • 30
9
votes
2 answers

In Azure AD B2C, How do i link a social account of a user with an already existing local account during first time sign in from social login?

As i understand from documentation, Azure AD B2C creates a new local account for every user that comes from a social login such as GMail/Facebook while signin first time (Correct me, if i'm wrong). However i want to intercept this and link the user…
9
votes
2 answers

Azure AD B2C logout after session timeout

Situation I have a web application that is using Azure AD B2C as its authentication. We're using OWIN OpenIdConnect to handle this process. The session timeouts are set to 15 minutes (sessionState in web.config and on our AzureADB2C signin policy)…
IvanL
  • 2,475
  • 1
  • 26
  • 39
9
votes
2 answers

Why is Redirect URL Fully Qualified in Azure AD B2C?

Why does the redirect URL have to match completely? Wouldn't matching at the domain level be sufficient enough for proper security? What if I had hundreds of paths? example urls: …
spottedmahn
  • 14,823
  • 13
  • 108
  • 178