azure-ad-b2c-custom-policy

问题 Is it possible to read a custom query string parameter from a SAML2 relying party request?. Using the {OAUTH-KV:any custom query string} does not work. example: https://mytest.b2clogin.com/mytest.onmicrosoft.com/B2C_1A_TEST_SAML/samlp/sso/login?myparameter=true I need to read the "myparameter" value into a claim. 回答1: Hope you are trying to do the following: <InputClaims> <InputClaim ClaimTypeReferenceId="givenName" DefaultValue="{OAUTH-KV:name}" /> </InputClaims> To get the value from the

问题 This a (mostly) theoretical question from a new B2C user. If all of the claims I send to the RP are available from an OIDC ClaimsProvider, I seem to be able to create a "pass through" custom policy that doesn't actually require an Azure AD user to exist - token is just created from claims. Are there any ways in which this will break B2C processing? I haven’t found any during limited testing. Does it pose any long-term headaches for B2C support? 回答1: Well, at the very least it is unexpected.

问题 This was suggested by Hari Krishna on another thread to open a new SO thread for this discussion. How do I programmatically clear or update a phone number for Azure AD B2C MFA? We are using B2C custom policies with a step to write back the user's MFA profile to the B2C profile. The B2C technical profile name is AAD-UserWritePhoneNumberUsingObjectId . <!-- Save MFA phone number: The precondition verifies whether the user provided a new number in the previous step. If so, then the phone number

问题 This was suggested by Hari Krishna on another thread to open a new SO thread for this discussion. How do I programmatically clear or update a phone number for Azure AD B2C MFA? We are using B2C custom policies with a step to write back the user's MFA profile to the B2C profile. The B2C technical profile name is AAD-UserWritePhoneNumberUsingObjectId . <!-- Save MFA phone number: The precondition verifies whether the user provided a new number in the previous step. If so, then the phone number

来源： https://stackoverflow.com/questions/64148504/modify-the-jwtissuer-claimsprovider-in-the-custom-policy-to-achieve-the-jwe-in-a

来源： https://stackoverflow.com/questions/64148504/modify-the-jwtissuer-claimsprovider-in-the-custom-policy-to-achieve-the-jwe-in-a

来源： https://stackoverflow.com/questions/63997758/looking-for-an-easy-option-to-change-the-title-of-a-selfassertedattributeprovide

来源： https://stackoverflow.com/questions/63997758/looking-for-an-easy-option-to-change-the-title-of-a-selfassertedattributeprovide

来源： https://stackoverflow.com/questions/64036476/can-i-recognize-know-what-the-orchestrationstep-im

来源： https://stackoverflow.com/questions/64036476/can-i-recognize-know-what-the-orchestrationstep-im