Questions tagged [azure-ad-b2c]

Azure AD B2C is a cloud identity management solution for web and mobile applications targeting your customers (consumers and businesses).

Azure Active Directory B2C

Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available global service that scales to hundreds of millions of identities. Built on the same enterprise-grade secure platform as Azure AD, Azure AD B2C keeps your applications, your business, and your customers protected.

>> Get started with Azure AD B2C

Features

  • Email-based or username-based local accounts
  • Social identity providers (Facebook, Google, Microsoft and more)
  • Custom identity providers (OpenID Connect, SAML and more)
  • Built-in user journeys (sign up/sign in, edit profile, password reset)
  • Custom user journeys
  • Built-in and custom user attributes
  • Configurable application claims
  • User interface customization
  • Multi-factor authentication

Posting Azure AD B2C questions in Stack Overflow

The following tips will help you get quicker/better answers when posting Azure AD B2C questions:

5577 questions
8
votes
2 answers

Define application specific user roles in Azure AD B2C

I would like to add Authorization to a web API written in Asp.Net Core using Azure AD B2C. I already have the Authentication part working, and now I would like to add "Roles" to my application, like "Administrators", and probably in the future more…
Gimly
  • 5,975
  • 3
  • 40
  • 75
8
votes
2 answers

Login redirect a user with Azure AD B2C from an Angular application and msal.js

I'm trying to get an Angular 4 app to correctly do an implicit authentication with Azure AD B2C. I'm using msal.js to try and make it to work. I've checked the very limited official sample code, but it's of no real use as it's using a popup to login…
Gimly
  • 5,975
  • 3
  • 40
  • 75
8
votes
2 answers

Using MSAL.js in SPA for Azure B2C Authentication - Pop up window an issue?

So I was thinking of using MSAL for authentication against the AZURE B2C Identity Provider, but from what I can see by looking at the code, MSAL is dependent on pop up windows for logins. (Please correct me if I'm wrong). My question is, given that…
8
votes
2 answers

Change Azure AD B2C User Password with Graph API

I'm trying to use the Sample Graph API app to change a user's password but I'm getting: Error Calling the Graph API Response: { "odata.error": { "code": "Authorization_RequestDenied", "message": { "lang": "en", "value":…
spottedmahn
  • 14,823
  • 13
  • 108
  • 178
8
votes
4 answers

How can I debug an Azure application that has insufficient B2C permissions?

The Environment I have an Azure B2C tenant for managing simple username/password sign-up and sign-in, following the example found here: https://github.com/Azure-Samples/active-directory-b2c-javascript-hellojs-singlepageapp The tenant manages the…
David
  • 13,133
  • 1
  • 30
  • 39
8
votes
2 answers

How do you add a user with a local name in Azure Active Directory B2C?

I've got an Azure Active Directory B2C up and running and can sign in with users created in the AD that have the form of @.onmicrosoft.com.  So, for example, john.smith@myorganization.onmicrosoft.com, works just fine.  But these user names are…
Quark Soup
  • 4,272
  • 3
  • 42
  • 74
8
votes
1 answer

Azure AD B2C - Local IDP with "Username" not providing username claim

I've configured an identity provider to use local accounts with usernames rather than passwords. I have created a user with a Display Name, User Name, and Email. I am able to select "Display Name" and "Email Address" application claims for all…
Kevin Ortman
  • 1,909
  • 14
  • 16
8
votes
1 answer

How to get current login user's username & email address in C# Azure B2C authentication without Graph API?

How to get current login username and also their email address? Identity provider for the account is username not email. Username is not returned as claims in any of policy such as sign-in, sign-up etc. Custom attribute like "SpouseName" can be…
P. Nabin
  • 173
  • 2
  • 11
8
votes
4 answers

Find a User by Email Address

I'm trying find out if an email address is already taken in my Azure AD B2C directory. var token = await this.GetTokenAsync(); var client = new HttpClient(); var id =…
Adrian Thompson Phillips
  • 6,893
  • 6
  • 38
  • 69
8
votes
2 answers

B2C: Redirect to "sign-up" flow of a "Sign-up or Sign-in" policy

Microsoft Recently added the new "sign-up or sign-in" policy to Azure AD B2C. https://azure.microsoft.com/en-us/documentation/articles/active-directory-b2c-reference-policies/#create-a-sign-up-or-sign-in-policy By default when we direct a user to…
Pytry
  • 6,044
  • 2
  • 37
  • 56
8
votes
2 answers

Define Azure AD B2C vs B2B uses and differences

Could you please define cloud based authentication services Azure AD B2C and B2B with it's uses and their differences if any. Please provide list of web resources if you can.
jitendra joshi
  • 677
  • 5
  • 18
8
votes
2 answers

Automate creation of Azure AD B2C Tenants

Is it possible to create Azure AD B2C tenants programmatically (e.g. with Powershell, REST API)? We are developing a multi-tenant SaaS solution for which we would like to create an Azure B2C tenant automatically whenever a new tenant registers.
Rainer
  • 676
  • 7
  • 15
7
votes
2 answers

For Azure B2C, is there a way to send the user principal name via claims?

I'm having some issues with getting the currently signed-in user's username from Azure b2c to my Blazor web app. Essentially, I want to make a username account where a username is the User Principal Name. I was originally using an email sign-up…
Zami77
  • 127
  • 8
7
votes
1 answer

How to add custom JavaScript to Azure AD B2C SignIn flow

I want to add custom JS to Azure AD B2C flow, but I can't figure out how to do this. I read the docs I think 10 times, but still don't get it. So far what I understand I have a Sign up and sign in (Recommended) user flow I enabled JavaScript…
xakpc
  • 1,709
  • 13
  • 27
7
votes
4 answers

"AADSTS900144: The request body must contain the following parameter: 'grant_type'.?

I built an app in my Azure ad b2c tenant and configured it as shown, but why can't I request an access token in postman? app registration API permissions postman screenshot Here are the links to the two documents I follow: Register a Microsoft Graph…