Questions tagged [azure-ad-b2c]

Azure AD B2C is a cloud identity management solution for web and mobile applications targeting your customers (consumers and businesses).

Azure Active Directory B2C

Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available global service that scales to hundreds of millions of identities. Built on the same enterprise-grade secure platform as Azure AD, Azure AD B2C keeps your applications, your business, and your customers protected.

>> Get started with Azure AD B2C

Features

  • Email-based or username-based local accounts
  • Social identity providers (Facebook, Google, Microsoft and more)
  • Custom identity providers (OpenID Connect, SAML and more)
  • Built-in user journeys (sign up/sign in, edit profile, password reset)
  • Custom user journeys
  • Built-in and custom user attributes
  • Configurable application claims
  • User interface customization
  • Multi-factor authentication

Posting Azure AD B2C questions in Stack Overflow

The following tips will help you get quicker/better answers when posting Azure AD B2C questions:

5577 questions
1
vote
1 answer

How to allow external users to sign in to an app that is secure by Microsoft identity using Azure AD

I have an app (ASP.Net Classic) that is using Azure AD authentication. Now, we want to allow user outside of the organization to sign in. I read few document B2C and B2B, but I am unable to see which one to good for me. I am looking that members…
Jashvita
  • 553
  • 3
  • 24
1
vote
0 answers

Azure AD B2C with Microsoft account and Sign in user

I am getting this error when configuring an asp.net core app to use Azure AD B2C authentication with Microsoft Account as external identity provider. AADSTS70000121: The passed grant is from a personal Microsoft account and is required to be sent to…
Jay Nanavaty
  • 1,089
  • 1
  • 15
  • 29
1
vote
1 answer

Add Forgot password link to email signin with passwordless template

I would like to add a Forgot Password link to the email signin page, like so: I'm using the passwordless starter pack that splits Phone and Email signups/signins in different screens. My problem is that I cannot find the right place to make the…
LuisDev99
  • 1,697
  • 17
  • 13
1
vote
0 answers

Azure B2C user flows - accessibility issues on screen readers

We currently have issues to make the B2C user flows accessible from a screen reader perspective. All the DOM ingested by the MS user flows in junction with our html/css UI files makes impossible for a screen reader to don´t crash or work with…
1
vote
0 answers

Difference between CombinedSignInAndSignUp with api.signuporsignin vs ClaimsProviderSelection with api.idpselections

I'm wondering if there is any difference between following sets of orchestration steps: CombinedSignInAndSignUp with api.signuporsignin
kamilz
  • 168
  • 1
  • 12
1
vote
0 answers

Azure AD B2C - authorization code grant, profile_info response

I'm using Azure AD B2C with Authorization code grant. In the response after exchaning code for token, there is additional property profile_info with JSON encoded as Base64. { "id_token": "", "token_type": "Bearer", …
kamilz
  • 168
  • 1
  • 12
1
vote
1 answer

ADB2C - The claims exchange 'SendOtp' specified in step '2' returned HTTP error response with Code 'BadRequest' and Reason 'Bad Request'

I am using 'DisplayControl_TrustFrameworkExtensions' custom policy in ADB2C to customize email templates. I have referred to this link to modify Custom policy. I am using the technical profiles below.
1
vote
2 answers

How to get users from Azure Active Directory into Azure Active Directory B2C

I have a .Net 6 app that needs to be able to be logged into by a list of users that I setup and into my companies Azure Active Directory. Is there a way for B2C to inherit the Azure Active Directory users? I know how to set it up to use just my…
baseballr
  • 63
  • 5
1
vote
0 answers

How to Use Send Grid to send a Confirmation Email with Azure B2C custom policy

I have a current policy that I need to send a confirmation email. I have a send grid account that is currently delivering a verification email and its working fine. In my password reset flow, this is what I have.
Bnd10706
  • 1,933
  • 5
  • 24
  • 39
1
vote
1 answer

User already exists with AlternativeSecurityId with another issuerUserId/issuerAssignedId

We're having a problem with AAD-UserWriteUsingAlternativeSecurityId because AlternativeSecurityId exists, but, it derivates from ClaimTransformations which has receive two InputClaims issuerUserId issuer The issue remains the same, but,…
1
vote
0 answers

MSAL Library for Android took fairly long time to retrieve access token from cache

Following the guidelines highlighted at https://learn.microsoft.com/en-us/azure/active-directory/develop/msal-acquire-cache-tokens , every time before I make an API call I'll first call acquireTokenSilentAsync to get the access token either from…
Bruce
  • 2,357
  • 5
  • 29
  • 50
1
vote
1 answer

First and Last Name Mandatory in B2C SignUp Policy

We are using B2C Custom Policies and just realized that there doesn't seem to be an easy way to make the first and last name fields mandatory. Has anyone else been able to figure this out? I have tried the following: Used a Restriction on the Name…
Anup Marwadi
  • 2,517
  • 4
  • 25
  • 42
1
vote
1 answer

Self service password change with TOTP confirmation

Based on samples available on Github (https://github.com/azure-ad-b2c/samples/tree/master/policies/totp) I have implemented policies for enabling TOTP MFA. Now, when the user wants to change his password (not reset via "Forgot your password?") I…
kamilz
  • 168
  • 1
  • 12
1
vote
0 answers

Bad Request or no response when login if there are multiple Azure b2c login pages

We are using Azure B2C for couple of our web applications. User could be using M365 Authentication or local account to login into our web applications via Azure B2C. Generally the authentication with Azure B2C works well although from time to time,…
windfly2006
  • 1,703
  • 3
  • 25
  • 48
1
vote
1 answer

End user getting "Missing required element [Email Address]" error on Forcing password reset first logon

We are following Azure B2C sample code Azure AD B2C: Force password reset first logon to implement logic to force new local user to reset the password on the first login since we don't want them to use temporary password we generated for them. It…
windfly2006
  • 1,703
  • 3
  • 25
  • 48