6,180
questions
0
votes
1
answer
65
views
ASP.NET Core Web API authentication with Azure AD B2C
I am trying to configure Azure AD B2C authentication with my Web API and although it builds and compiles fine, after passing in a token with a request, it logs:
... has a valid signature.
Lifetime of ...
0
votes
1
answer
71
views
I am getting an error that OAuth2 Code has already been redeemed
def get_access_token(authorization_code):
token_url = "https://login.microsoftonline.com/xxxx-xxxx-xxxx-xxxx-xxxxcxxxxe/oauth2/v2.0/token"
redirect_uri = "https://...
0
votes
0
answers
28
views
Blazor server app using an AzureAdB2C for the authentication and running in Kubernetes
I have developed an Blazor server app that uses AzureAdB2C to authenticate users. The app is deployed in a kubernetes cluster and is accessible via a subdomain such as myapp.domain.com.
The ...
0
votes
1
answer
38
views
Cannot create Azure B2C Tenant
My app contains a way to authenticate using email address and password, currently done using Firebase. I want to transition my app from Firebase authentication to an Azure service. I think I found ...
0
votes
0
answers
21
views
Google SSO logout not sending SAML parameters to Azure AD B2C - AADB2C: HttpRequest does not contain any SAML 2.0 protocol parameters
I have currently set up Azure AD B2C as IDP to log into Google Workspace. I am using a custom SAML policy which has an additional MFA step integrated and the login works as expected.
When I logout, ...
0
votes
1
answer
52
views
My Azure AD B2C User Flow is not returning a token on jwt.ms
I have recently created a new Azure Ad B2C service and have linked a tenant to that service. I am attempting to create user flows on the service, and when testing my sign in/sign up user flow, I had ...
0
votes
1
answer
13
views
Why is the OID available on the client, but not on the web service?
Follow up to the question posted here Using Microsoft.Identity.Web and Azure B2C. Authentication is working on both sides, the Windows client and the ASP.NET web service.
Now I want a unique ...
0
votes
1
answer
45
views
Conditional Access Authentication Context availability on Azure B2C Tenant
Is Conditional Access Authentication Context not supposed to be available on Azure B2C Tenant? I have an Azure B2C Tenant with PremiumP1 pricing tier. When I go to manage that tenant via "Open ...
0
votes
1
answer
41
views
console application with user token with MSAL in c#?
I have console application and want to create MSAL token.
I tried below code #
IPublicClientApplication app;
app = PublicClientApplicationBuilder.Create(clientId).WithAuthority(authority).Build();
...
0
votes
0
answers
59
views
Azure AD B2C MSAL Browser Issue with Custom UI and API Validation Response
I'm working with Azure AD B2C and using the MSAL.js library (PublicClientApplication) to handle authentication in a web application. I'm customizing the UI after a user enters a verification code, ...
0
votes
0
answers
31
views
How to Restrict MFA Based on Country Code in Azure AD B2C Custom Policy?
I’m working on an Azure AD B2C custom policy where I need to restrict users from performing Multi-Factor Authentication (MFA) based on the country code of their phone number. The phone number is ...
0
votes
0
answers
25
views
Azure B2C: add output claims for local sign in
I have a custom policy running in B2C. Most of our users are local to B2C, but we also have our company's Entra ID tenant set up as an identity provider via OpenID Connect.
I need to be able to ...
0
votes
1
answer
30
views
Azure B2C: Local or Social discovery using email address
We have implemented a B2C custom policy that allows users to sign in with B2C Local or Social (Entra) accounts. Our login screen has a unified sign-in page that was modelled on the ...
0
votes
0
answers
18
views
how to configure a custom policy in B2C to use MockSaml
I need a free SAML identity provider, I have found mocksaml (https://mocksaml.com/), that is called from a B2C custom policy and a JWT token is produced.
I am following this instructions from the ...
0
votes
0
answers
36
views
OpenID Connect events not triggered in OWIN with Azure B2C on IIS
I'm having an issue with my ASP.NET MVC application that authenticates against Azure AD B2C with OWIN and OpenID Connect. The authentication works perfectly when running locally (under localhost), but ...
0
votes
0
answers
55
views
Implementing Email MFA for Sign-In Using SendGrid
Description:
I have successfully implemented email Multi-Factor Authentication (MFA) for user sign-up using SendGrid, following the example provided at policies/custom-email-verifcation-displaycontrol/...
0
votes
1
answer
45
views
Client Certificate on Access Token request in Azure B2C Custom Policy for OAuth 2.0 3rd Party Provider
I am working on an Angular SPA that uses Azure B2C with a 3rd party identity provider which implements a non-standard OAuth2.0 codeflow for authentication. It does not implement ODIC either.
I have ...
0
votes
1
answer
61
views
Azure B2C Authorization consent screen
I'm following this guide (https://medium.com/@shoaib.alam/part-2b-oauth-2-0-authorization-code-grant-with-azure-ad-d97b213ecc9) to create an Azure Application and request access to it using ...
0
votes
1
answer
114
views
Azure Functions and ADB2C integration
I have an Azure Functions application (API), which consists of HTTP-triggered functions.
Also, I have Azure Active Directory B2C tenant and signup/signin policy, which I use for user identities.
I ...
0
votes
1
answer
42
views
How to get username from Application claims in Azure B2C
We have a user policy that I like the get username from loggin user.
Our user policy as only Signin and not signup. We are creating user from in the Azure B2C.
Feels little over kill to create a ...
0
votes
1
answer
55
views
Azure B2C Custom Policy - REST Call with Bearer Token from OIDC Step
I have a custom policy/flow for the B2C Identity Experience Framework. I need the user to log into a Microsoft account, get the access token from that, then use that access token to call the /me Graph ...
0
votes
1
answer
39
views
how to limit code verification email Spaming in Azure B2C
I've been trying to see how can I limit the number of codes being send to an email during the signup/reset password.
I couldn't find a simple solution from Azure for that.
What I could find is:
...
0
votes
1
answer
58
views
Azure AD B2C Run User Flow Fails
I'm setting up Azure AD B2C to use in my Web API and mobile apps. I set it up following the documentation provided by Microsoft here: https://learn.microsoft.com/en-us/azure/active-directory-b2c/...
1
vote
0
answers
77
views
Calling my API from .NET MAUI app using MSAL
I'm implementing MSAL in my ASP.NET Core Web API and .NET MAUI apps to authenticate users against Azure AD B2C.
I'm following this code sample to implement this on the .NET MAUI app: https://learn....
0
votes
1
answer
37
views
Azure ADB2C Custom Policy Social IdP - Updated Facebook Client Id and Secret
I have updated the custom policy with new Facebook Client Id and Secret. When user logs in with Facebook account that is already registered in ADB2C tenant, there is an error I got that "Email ...
0
votes
1
answer
44
views
Writing to FHIR service using B2C identity provider
Is it possible to create an application the uses B2C identity provider and writes to the Azure FHIR service?
All the B2C examples I have encountered only read for the FHIR service (e.g. https://learn....
0
votes
1
answer
39
views
Local user accounts not created properly in Azure AD B2C
I have an Azure AD B2C tenant and there are 2 app registrations are there under that. One for my API and another for my UI application.
My identity provider is Ping Federate and My login is working ...
0
votes
1
answer
33
views
How do add device management to TOTP custom B2C policy?
I've been able to get this sample custom policy working on my B2C tenant. However, once a user signs-up with the authenticator app the first time, there doesn't seem to be a way to add a new device (...
0
votes
1
answer
81
views
Issue with PKCE Authentication Flow for Azure AD B2C: "The supplied code_verifier is invalid"
I am currently trying to use the PKCE method of obtaining an access token for Azure AD B2C to pass to my Azure Function APIs in API Management. I am passing the below URL into my browser to generate ...
0
votes
1
answer
45
views
Azure AD B2C UI customization with React
I want to customise the Azure AD B2C UI for a React application. I would like to investigate the possibilities of utilising <div id="api"></div> to accomplish ui customisation. ...
-1
votes
0
answers
34
views
Identity provider with spring security in Azure AD B2C
I am integrating Azure AD B2C with a service created with spring security, this service performs the function of identity provider for Azure AD B2C just as it would be to federate authentication with ...
0
votes
0
answers
31
views
Modify identities attribute with API Connector before the user is created in Azure B2C [closed]
I want to know if it's possible to modify the identities in the API connector before creating the user. I tried so many things, but nothing happened.
Cause when I use my user flow to create my user ...
0
votes
1
answer
39
views
Azure B2C add email to the token after verified it
Hi everyone,
I'm working on an authentication flow using Azure AD B2C and could use some help with the implementation details. The scenario is as follows:
Scenario:
User clicks login in my mobile app (...
0
votes
1
answer
44
views
Adding custom attributes to user in Azure AB2C sign up flow using API connector / Azure Function
I am trying to add a custom attribute to a user using the "Before creating the user" API connector in a sign up user flow. This is what I return from my function:
var dict = new ...
0
votes
1
answer
40
views
React on Azure static web app token does not persist on refresh
I deploy a react application to an Azure static web app.
My authentication works via msal with following config:
export const msalConfig = {
auth: {
clientId: "XXXXXXXXX",
...
0
votes
0
answers
37
views
Azure B2C presignup API Connector failing to reach API with sign in/signup user flow
I have an Azure B2C API connector assigned to "Before creating the user", as part of my sign in/sign up flow.
This points to my API, and does pre-processing before a user signs up.
I ...
0
votes
1
answer
35
views
Azure AD B2C: Can I use a claim value in a Metadata Item in a TechnicalProfile?
I have a TechnicalProfile like this:
<TechnicalProfile Id="ExternalDirectorySignInProfile">
<DisplayName>Multi-Tenant AAD</DisplayName>
<Protocol Name="...
2
votes
0
answers
48
views
How to Implement Session Threshold Check in Azure AD B2C Custom Policy for High-Traffic Scenarios? [closed]
I'm using Azure AD B2C with a custom policy for authentication and need to handle peak burst scenarios effectively.
During high-traffic events, such as promotions, I want to manage session thresholds ...
1
vote
0
answers
39
views
How to Exclude Refresh Token and Profile Info from ADB2C Auth Code Grant Flow Response Using PKCE [closed]
I have registered an application in an Azure AD B2C tenant for testing purposes. I am using this app for user authentication via the Authorization Code Grant flow with PKCE.
During the exchange of the ...
1
vote
0
answers
61
views
Azure AD B2C - Sign out from external idp [closed]
I have deployed Azure AD B2C custom policies based on the SocialAndLocalAccounts example. Along with local accounts, the policy includes Google, Microsoft, and multi-tenant Entra ID providers.
I am ...
0
votes
1
answer
46
views
Set manually verified state for VerificationControl Azure B2C custom policy
I have implemented custom DisplayControl based on official tutorial.
It literally looks like below and it works as suggested in tutorial - it always requests from user to verify email address even if ...
0
votes
0
answers
45
views
Is it possible to render dynamic HTML content independently through AD B2C Custom Policy?
After Sign in, I want to render HTML content. This HTML content is dynamic and is returned from an endpoint. I want to render this HTML content in AD B2C custom Policy. So every time a user signs-in, ...
0
votes
0
answers
78
views
Bearer was not authenticated. Failure message: IDX10516: Signature validation failed. Unable to match key:
I have a info message logged in console while running my dotnet 3.1 application.
Bearer was not authenticated. Failure message: IDX10516: Signature validation failed. Unable to match key:
kid: '...
0
votes
1
answer
43
views
Azure AD B2C autocomplete "missing user/pass" error message management
We are using Azure AD B2C with custom policies and a custom design (HTML and CSS). Everything works fine, but we would like to fix one specific issue.
Scenario:
On the sign-in page, if a user forgets ...
0
votes
1
answer
70
views
Why Azure AD B2C Session Still Active while I logged Out?
I implement my react app with Azure AD B2C and I configure Single sign-on configuration of the User Flow as Application, not Tenant.
When I sign out, it clears the token from local storage but does ...
0
votes
2
answers
22
views
Use variable in custom policy screen to load style sheet
I would like to use a query string variable in my custom unified screen for Azure AD B2C to affect which styling sheet needs to be loaded. Something like this kind of URL:
https://storageaccount.blob....
0
votes
2
answers
51
views
Extracting email address from the sign in page in Azure AD B2C for third party provider
I want to create a UX where the user can enter their email + password and select "Sign in" to login with password - OR to enter their email address and select "Login with custom ...
1
vote
1
answer
98
views
How do I customize my Azure AD B2C sign-in user flow email MFA verification template?
I have built a web app and hosted it using Azure App Service and I am using Azure AD B2C for its authentication method for which I have MFA enabled through email. Is there a way to modify the banner ...
0
votes
0
answers
36
views
Is there a way to configure session time out on Azure API Management developer portal?
I have an Azure API Management instance that requires users log in through Azure AD B2C for authentication into my company's developer portal. The issue is that the users stay logged into the ...
0
votes
2
answers
36
views
Azure B2C - How to show a custom HTML page after password reset flow?
The default behavior is auto login after password reset but we have a requirement to redirect to a html page from where user can sign in.
I have created a content definition and a technical profile ...