Questions tagged [azure-ad-b2c]

Azure AD B2C is a cloud identity management solution for web and mobile applications targeting your customers (consumers and businesses).

Azure Active Directory B2C

Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available global service that scales to hundreds of millions of identities. Built on the same enterprise-grade secure platform as Azure AD, Azure AD B2C keeps your applications, your business, and your customers protected.

>> Get started with Azure AD B2C

Features

  • Email-based or username-based local accounts
  • Social identity providers (Facebook, Google, Microsoft and more)
  • Custom identity providers (OpenID Connect, SAML and more)
  • Built-in user journeys (sign up/sign in, edit profile, password reset)
  • Custom user journeys
  • Built-in and custom user attributes
  • Configurable application claims
  • User interface customization
  • Multi-factor authentication

Posting Azure AD B2C questions in Stack Overflow

The following tips will help you get quicker/better answers when posting Azure AD B2C questions:

5577 questions
1
vote
1 answer

What is a good strategy to save user premium subscription for a web app with Azure AD B2C as user management system?

I am building a Blazor Server web app that will have locked features only accessible via paid subscription (payment handled with stripe). I am using Azure AD B2C for user management/authentication. I also have an Android and iOS app built with…
Zeppelin
  • 99
  • 1
  • 8
1
vote
2 answers

B2C Custom Policy with TP OpenId Connect - IdTokenAudience - MultiApple scenario

I have a custom policy with an OpenId Connect Technical Profile calling authorize and token endpoints from metadata Items to my custom API middleware which is used to redirect to Apple authenticathion endpoint/website so i can handle a multiApple…
Juanma Feliu
  • 1,298
  • 4
  • 16
1
vote
2 answers

Blazor WASM (Hosted) + Azure AD B2C Fails To Redirect To Login Page When Published

Have a .Net 6 Blazor Hosted WASM app configured to use Azure B2C, the app requires authentication for every page except the Authentication page which allows anonymous. Running locally it works, redirecting the user to B2C to authenticate. However…
1
vote
0 answers

Loop loading when trying to slect tenant when adding Azure AD Service Dependency - VS 2022

I've created a NET 6 web app to study how works the Azure AD B2C. So after doing all the configurations under Azure Portal, I went to Visual Studio 2022 to set the Service Dependency Service selection But when I select the "Microsoft Identity…
1
vote
1 answer

Azure AD B2C how to configure the "aud" claim

I am new to the Azure ecosystem and I am a bit lost. I use Azure AD B2C to secure multiple Spring Boot applications but I have a strange behavior, it seems like a token is tied to a specific application, which is not really convenient, because that…
akuma8
  • 4,160
  • 5
  • 46
  • 82
1
vote
1 answer

Looking up users in AAD B2C using extension attributes or unusual standard attributes

This is a follow-up to this question. I need to query AAD B2C to lookup a user using an employeeID which, for reasons related to what fields our account provisioning solution can deal with, is currently stored in the telephoneNumber field. I have…
1
vote
1 answer

SSO using Azure B2C with multiple custom policies with different domains

I have been several weeks on this now. I need to achieve the next scenario with Azure AD B2C custom subdomains: for example, having ssositeA.mydomain.com with custom policy b2c_1a_signin_siteA and ssositeB.mydomain.com with custom policy…
1
vote
1 answer

I'm authenticated but "Please sign up before you can sign in"

Have my public-facing application deployed to Azure. Intended to delegate Authentication to Microsoft, Google, Facebook, Apple etc. So once a user is authenticated as who he claims to be and authentication/ID token returned by that provider, app…
Jeb50
  • 6,272
  • 6
  • 49
  • 87
1
vote
1 answer

b2c - Guest account not a member

I'm usign custom policies in Azure. How to make any new account created as a visitor account and not a member please. Can someone explain the differences between Guest and Member? What are consequences when creating a user in B2C? Can't find it in…
1
vote
1 answer

MSAL - How to get ID token using Angular 13 compatible MSAL Library

We are using "MSAL Angular 13" compatible library for Azure AD Authentication. By Default, it passes Access Token. In my project, we need to pass ID Token not Access token. How to get ID Token? MSAL has one service but there is no methods like…
Siddartha Pal
  • 23
  • 1
  • 8
1
vote
0 answers

app roles not present in returned claims after authenticating from Azure AD B2C using Angular

i have an angular app with version 2.2 of msal-angular i have registered 2 apps on azure. the UI app and the api app in the ui app manifest i created 2 app roles. and form the UI i was able to assign one of the app role to one of the user. when i…
1
vote
1 answer

azure functions and AD B2C integration

I have SPA made by react. And user authentication is done with Azure AD B2C. Right now, we are trying to figure out a mechanism to get an access token to access the backend after a user logs in. The backend is Azure functions. I think it is set up…
juckier
  • 63
  • 1
  • 6
1
vote
2 answers

Is it possible to automatically update B2C user details by using claims from the Issuer, using Identity Experience Framework?

I have created a policy for an application following the B2C tutorial docs. It successfully creates users in a B2C tenant, filling in givename.. email etc from any/all issuers - currently, other any other Azure tenant can sign into this B2C tenant,…
mack
  • 13
  • 3
1
vote
1 answer

How to single logout from Azure AD B2C with ITFoxTech SAML 2 library?

I've implemented a Web Application (Angular frontend and .NET backend) with Azure B2C as identity provider with custom policies via SAML. On the side of login everything is working fine. But now I'm struggeling with the single logout. What I want to…
as1984
  • 37
  • 2
1
vote
1 answer

Is there a way to use Key Vault for custom policy?

In my custom policy I have a technical profile to call SendGrid API to send emails. Use SendGrid's email API to send the code the the user