6,190 questions
-1
votes
0
answers
24
views
"Please link an application to use the 'Run user flow' experience."
I seem to have added the Application to be enrolled in my custom User Flow. But I don't get prompted for the information when I sign in and I can't "Run User Flow" simulation because "...
-3
votes
1
answer
46
views
Azure AD B2C — How to force DateTimeDropdown to use MM/DD/YYYY format?
I am using Azure AD B2C Custom Policies and have a claim defined for DOB like this:
<ClaimType Id="extension_dob">
<DisplayName>DOB</DisplayName>
<DataType>date&...
1
vote
1
answer
38
views
Azure AD B2C IdP-initiated SSO : REST TP receives literal {QueryString:...} tokens instead of actual query values
We are building an IdP-initiated SSO flow using Azure AD B2C custom policies, where the journey must:
Read 3 querystring values:
enc_attrs_token, sp, and EntityId
Pass them to a backend REST API via ...
0
votes
1
answer
112
views
Azure AD B2C custom page: `AADB2C90047` + Chrome CORS "`unknown` address space", but Firefox works
I’m using Azure AD B2C with a custom HTML sign-in page and a SPA that uses MSAL (msal-browser).
Setup:
B2C tenant: https://<tenant>.b2clogin.com (dev)
SPA uses loginRedirect with MSAL.
Custom ...
-1
votes
0
answers
55
views
Why do I get a client id error when it is correct?
I am working on an Azure Microsoft Entra External ID authentication in my MAUI Blazor hybrid app. I have a user flow in my tenant to allow external users to sign in via Google. When I created it, it ...
1
vote
0
answers
136
views
Pre-populate email and make it read only - Azure ADB2C custom policy
Scenario: the user will get an invite link, which the admin triggers. The link will navigate the user to "change password" dialog with Azure ADB2C, where the user finishes the registration ...
0
votes
0
answers
111
views
How to include email in Microsoft Entra External ID Google Configuration AttributesCollectionSubmit payload
I currently have an azure Entra External ID tenant working with a signupsignin user flow for local account that collects a few user attributes: name, surname, country, displayname. I then use the ...
0
votes
1
answer
73
views
Azure AD B2C: invalid_grant with JWE key missing when redirecting via SSO pre-login app
[ERR] Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler
Message contains error: 'invalid_grant',
error_description: 'AADB2C90090: The specified kid 'cpimcore_09252015' is not ...
0
votes
0
answers
59
views
Getting 404 error when adding an Azure AD B2C Quick Deploy Sample to a B2C Tenant (to give user choice of MFA method)
We currently have an Azure B2C tenant configured so that external users can log into our website. We currently use user flows for the basic scenarios (sign-in, sign-up, password reset, etc.), but in ...
0
votes
2
answers
80
views
Can't authorize user in Azure AD B2C using angular-auth-oidc-client
I have an angular app (ver. 20.2, zoneless, standalone), running locally for now at https://localhost:4200. The app uses Angular Auth OIDC Client.
As per docs, I use autoLoginPartialRoutesGuard for ...
0
votes
1
answer
434
views
How to allow any Entra ID user to sign in to Azure External ID (customers) without invitation or signup (similar to Azure AD B2C)?
In Azure AD B2C we had the following setup:
We configured Entra ID as an identity provider using a multi-tenant
app.
This allowed any Entra ID user (from any tenant) to log in.
After login, we had ...
0
votes
0
answers
129
views
Encountering AADB2C90018 error when Azure B2C app registration created with Terraform
I am attempting to use Terraform to create an app registration in Azure B2C. I have previously succeeded in this task by manually using Graph API requests in Postman. This involved:
Create the ...
0
votes
1
answer
177
views
AADB2C90018: The client id <client-id> specified in the request is not registered in tenant <tenant>
I am trying to create an app registration for a UI app in Azure AD B2C and use it in a Sign In flow.
If the app registration is created manually using the Azure Portal, when I run the Sign In user ...
-1
votes
2
answers
181
views
For Azure AD B2C, can we enable MFA only for local logins, and leave disabled for social logins? [closed]
Our system uses User Flows, not custom policy, and is a React SPA.
We currently use local accounts for logins, with MFA enabled.
Now I have enabled a social login for Google SSO. When users login with ...
1
vote
1
answer
53
views
Unable to Modify Azure AD B2C Components Using Local Account
I created a local (email + password) account in my Azure AD B2C tenant, which successfully signs into my web application via user flows. However, this account cannot access or modify B2C components ...
0
votes
0
answers
66
views
Azure AD B2C Custom Policy: "objectId" Claim Missing After TOTP Step / UI in 2.1.35
I have issues with our Azure AD B2C custom policy for contact sign-up, specifically with the TOTP (authenticator app) step and the handling of the objectId claim.
With version 2.1.35:
The form ...
0
votes
1
answer
63
views
QR code URI is correct but QR code not displaying on Azure AD B2C Custom Policy form [closed]
Implementing TOTP MFA in Azure AD B2C custom policy.
The QR code URI (qrCodeContent) is being generated correctly and matches the expected format (e.g., otpauth://totp/Test:[email protected]?secret=...&...
0
votes
2
answers
85
views
QR Code Not Displaying in Custom Policy TOTP Setup – qrCodeContent Value Incorrectly Formatted
Description:
Having issues with implementing TOTP MFA in an Azure AD B2C custom policy and are encountering a critical issue: the QR code does not render on the EnableOTPAuthentication page, and the ...
0
votes
0
answers
96
views
B2C Custom Policy for UserInfo: claim with `PartnerClaimType` returns both claims in response
I am using B2C Custom Policies to implement the UserInfo endpoint. I followed instructions in this article) to add the UserInfo endpoint, TechnicalProfile, and UserJourney. I also added a RESTful ...
1
vote
1
answer
71
views
Schema Validation Errors with <ClaimsTransformations> in Azure AD B2C Custom Policy
I am experiencing persistent schema validation errors when uploading my Azure AD B2C custom policy, specifically related to the <ClaimsTransformations> section. The error message is not always ...
0
votes
1
answer
64
views
Azure AD B2C Custom Policy: extension_inviteToken Not Passed to REST API Despite Correct Mapping
I am experiencing an issue with my Azure AD B2C custom policy where the extension_inviteToken claim, although present in the /authorize URL and audit logs, is not being passed to my REST API technical ...
0
votes
0
answers
31
views
Azure AD B2C implementation in blazor web app server based with refresh tocken via "offline_access" scope
I am trying the sample code from https://github.com/dotnet/blazor-samples/tree/main/8.0/BlazorWebAppOidcServer.
The Home and Count components work fine but the Login results in :
This site can’t ...
1
vote
1
answer
134
views
SSO Issue with Azure AD B2C Using Microsoft Accounts Across Subdomains
I'm setting up SSO behaviors across multiple modules of a web platform using Azure AD B2C Custom Policies as the identity layer. The modules are React apps served from different subdomains under a ...
0
votes
1
answer
115
views
Azure AD B2C Custom Policy Adds Duplicate p= Parameter or Results in p=null Error
Description:
We are implementing a custom policy (B2C_1A_CONTACTSIGNUP) for contact users in Azure AD B2C. Our application supports two separate authentication schemes: one for main account users (...
0
votes
2
answers
123
views
Error loading dynamic type: [Web.TPEngine.Providers.RestfulProvider]; Diagnostics=
I'm implementing a custom policy (ContactSignUp.xml) in Azure AD B2C that calls a REST API (ValidateInvite in InviteController) when a user clicks an email link to sign up. The inviteToken is passed ...
-1
votes
2
answers
189
views
How to set up ONLY Email Verification in Azure B2C Custom flow - Identity Experience Framework
I'm trying to implement a simple pure Email verification policy, in which the claim should return just the verified email address post-verification. When I run the flow, it just opens the b2clogin ...
0
votes
1
answer
80
views
Azure B2C custom extension policy Error is not reflecting the correct error message
I have tried everything to resolve this error message when typing to upload this custom extension policy. The error message is not reflecting what is really happening. All of the claims have a ...
0
votes
1
answer
64
views
SM-AAD and retrieve objectId from persisted claims
I have a technical profile for login, that also include UseTechnicalProfileForSessionManagment = SM-AAD. Once user is fully authenticated; I have another Journey that allows them to change their ...
0
votes
1
answer
284
views
How to add relay state parameter in SAML SSO in Azure AD B2C
I need to preserve the user's state in the application (where B2C is IDP and AEM is SP). That is, if the user bookmarks a page or needs to maintain the page's state, they should be able to do so. Upon ...
0
votes
1
answer
71
views
Custom variables try to be created even if they exist using GItHub Action of deploy-trustframework-policy
The error returned was
409/Request_MultipleObjectsWithSameKeyValue: An extension property exists with the name
I am using this in my GitHub Action
- uses: azure-ad-b2c/deploy-trustframework-policy@...
0
votes
2
answers
90
views
Pass custom claim from access token endpoint in Azure B2C custom policy
I am creating a custom policy in azureb2c with atlassian as identity provider (oauth2.0). I followed this article. In my endpoint (in the article it's an azure function) where I exchange the ...
0
votes
0
answers
72
views
How to update custom claims to user properties in from B2C application
In AD B2C application, during the signup flow. The user has to select the "user content, " a check box (that is a boolean value). I have created a custom claim for that. This custom claim ...
-1
votes
1
answer
75
views
Create credential for Implement ADB2C login in laravel [closed]
Hi i am try to implement ADB2C login in laravel , in Tenant Create time its show it will discontinue they tell setup in entra,
Error Image
how we can setup there i can't find any resource please help ...
0
votes
0
answers
133
views
Single sign out implementation using SAML in Azure AD B2C
I have a B2C custom policy application using SAML, where Azure AD B2C is the SAML IDP and the Adobe(AEM) application is the SAML SP. I'm trying to implement single sign-out, but I'm not getting the ...
0
votes
1
answer
121
views
AAD B2C + SAML IDP: ACS returns Policy 'B2C_1A_TrustFrameworkBase' does not specify a default user journey
I am configuring my AAD B2C to allow sign-in with a SAML Identity Provider by following this guide: https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-generic-saml
I ...
0
votes
0
answers
33
views
flutter web + firebase + azureb2c - Issuer URL is not working
I am trying to understand how to configure Firebase for Azure B2C.
I use Flutter for Web and trying to use firebase for authentication. Instead of basic authentication, I use Azure B2C provider ...
0
votes
0
answers
134
views
Microsoft Identity Web- GetAccessTokenForUserAsync Doesn't Return Custom Claim
I'm using an Azure ADB2C sign in flow that calls an Azure function to set custom claims, in my case userId, prior to the authorization ticket being set. My Blazor app consumes my token correctly and I ...
-1
votes
1
answer
111
views
Need guidance for configuring OIDC in B2C, to allow 3rd party to use my B2C as an IdP (new to B2C and Auth)
I have an Angular SPA application with a .NET Core WebAPI, both registered in B2C and using UserFlows. All works perfectly.
Now, we are working with a 3rd party "partner" web app that does ...
0
votes
1
answer
56
views
Logging out 2 applications .net blazor wasm and securing postlogoutredirect_uri
I have 2 .net8 applications using Blazor Wasm (client) and Blazor Server (Server).
Im trying to logout my user of 2 applications simultaneously and also securing the postlogout_redirect_uri.
From the ...
1
vote
1
answer
79
views
How do I get the Username from Azure AD B2C using MSGraph?
Microsoft is retiring Azure AD B2C. It will be supported for now but we are looking at moving to Entra External Id. We want to be able to transfer the users over to the new solution. This page talks ...
-1
votes
1
answer
71
views
AD B2C TOTP Custom policy and Google IDP
I am currently using this custom policy sample: https://github.com/azure-ad-b2c/samples/tree/master/policies/totp
First of all, this works perfectly with a local account. But on my application before ...
0
votes
1
answer
99
views
Azure AD B2C add user using Graph API with custom user attributes C#
I'm using the MS Graph API to register user on AD B2C, and it works when I tried without adding additional user attributes, but it fails with an error
properties are not available
when I tried ...
0
votes
1
answer
61
views
How to reverify the user login after 30 days in Azure AD B2C?
The requirement in the Azure AD B2C application is to force users to reverify themselves by generating an Email OTP every 30 days. That is, on the 31st day of their login, the message must pop up to ...
0
votes
1
answer
99
views
Using Azure AD B2C in MAUI Blazor Hybrid
I'm developing a MAUI Blazor Hybrid app where I'm using Azure B2C.
It works fine for Android/Web but when I try to do that for iOS with a remote mac paired through simulator, first I got this error:
...
0
votes
1
answer
76
views
How to avoid redirection of Azure AdB2c login page in IOS application created via capacitor
We have used Microsoft Azure ADB2C integrated in an Angular web app. Now we have converted it into a PWA app. With the help of the Capacitor library, we have converted it into an iOS application. But ...
2
votes
1
answer
326
views
AADB2C with Graph API: how to filter users by the nested `identities` collection?
I'm using the Graph API via HTTP. I need to filter on all users that have a signInType of "emailAddress".
I'm using this select:
https://graph.microsoft.com/v1.0/users?$select=displayName,...
0
votes
0
answers
158
views
Entra ID External - Access Token Validation Issues
We have an API that we would like to enable access for using Microsoft Entra External ID.
We performed the following steps:
Created the API App Registration under Entra ID and exposed scopes
Created ...
0
votes
1
answer
49
views
Blazor WebAssembly Standalone app can't authenticate when deployed to Azure Static Web App
I've created a Fluent Blazor WebAssembly Standalone App in Visual Studio. I've also done all the work inside AAD B2C with providers and flows and "connected" it to my app. When I run the app ...
0
votes
1
answer
70
views
AADB2C: Unable to assign a custom attribute in the "BeforeCreatingUser" API Connector
I'm using the Sign-in Sign-up User Flow in B2C. I have defined a custom user attribute MyAttribute, and I want to assign this attribute value in the BeforeCreatingUser event using an API connector.
I ...
1
vote
1
answer
81
views
msal issue with blazor wasm in authenticationStateProvider
Does anybody faced the issue where you can run msal authentication with azure AD b2c in blazor wasm but as popup only? how can you get it to work to login using a form that has email and password and ...