azure-ad-b2c

Query Azure AD Graph for B2C SignInName

 ̄綄美尐妖づ 提交于 2020-05-29 05:02:20
问题 How do I query Azure AD Graph for a SignInName? i.e. I want to take the user's login-name and find the user object in the Azure AD Graph. I would assume I'm supposed to use $filter, right? I tried: https://graph.windows.net/myB2Ctenant.onmicrosoft.com/users?api-version=1.6&$filter=signInNames eq spottedmahn and I got: The operand for a binary operator 'Equal' is not a single value. Binary operators require both operands to be single values. Ok, so maybe I'm suppoed to use the any operator so

Query Azure AD Graph for B2C SignInName

醉酒当歌 提交于 2020-05-29 05:02:00
问题 How do I query Azure AD Graph for a SignInName? i.e. I want to take the user's login-name and find the user object in the Azure AD Graph. I would assume I'm supposed to use $filter, right? I tried: https://graph.windows.net/myB2Ctenant.onmicrosoft.com/users?api-version=1.6&$filter=signInNames eq spottedmahn and I got: The operand for a binary operator 'Equal' is not a single value. Binary operators require both operands to be single values. Ok, so maybe I'm suppoed to use the any operator so

The preferred replica is unavailable - Microsoft Graph [closed]

安稳与你 提交于 2020-05-17 08:49:16
问题 Closed. This question is not reproducible or was caused by typos. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 6 days ago . While creating user using microsoft graph ,it was working fine yesterday but now I am getting the error below. "error": { "code": "Directory_ReplicaUnavailable", "message": "The preferred replica is unavailable. Please retry your request.", "innerError": { "request-id": "19030bd0

How to hook into AuthorizationCodeReceived when using AddAzureADB2C?

落爺英雄遲暮 提交于 2020-05-17 08:25:52
问题 I've created a simple Blazor server application linking to an Azure B2C directory for authorization. Everything works but I need to add additional role claims to the token. Research has pointed me to this SO post which refers to adding the claims during the AuthorizationCodeReceived notification(Example here). I understand what I need to do, but the example is using OpenIdConnectAuthentication (from Microsoft.Owin.Security.OpenIdConnect ) instead of Blazor server's Microsoft.AspNetCore

Avoid verification code emails when the user is not registered in Azure AD B2C

孤街醉人 提交于 2020-05-17 06:31:51
问题 Azure B2C is gives a false impression that the user is in the directory when they try to reset their password. Following is steps in reset password: 1) User clicks the Reset Password link 2) B2C presents a page with “Email Address” field and says “Verification is necessary. Please click Send button.” 3) User enters his email address and clicks “Send Verification Code” 4) B2C sends the verification code this that email address (Even if no user is associated with that email address. This is

Angular 9 throw error 'missing required parameter' on requesting token from Azure B2C

送分小仙女□ 提交于 2020-05-16 22:36:28
问题 I am working on Angular 9 application with .NET CORE Web API 3.1 application. I configure Angular client App to authenticate using Auth 2.0 Azure B2C and angular-oauth2-oidc in Angular. I am getting error on requesting token and CORS Policy in Browser. Screen shot at the end {"error":"invalid_request","error_description":"AADB2C90083: The request is missing required parameter: grant_type.\r\nCorrelation ID: xxxx5370-695b-4f09-b583-e67600000000\r\nTimestamp: 2020-05-07 15:23:06Z\r\n"} I

Using Azure AD B2C with Bot

醉酒当歌 提交于 2020-05-16 16:15:13
问题 I've created a bot in Azure that uses a SignInCard to give users the option to log-in or register as customers. This is the SignInCard I currently have: messageActivity.Attachments.Add(new SigninCard() { Buttons = new List<CardAction>() { new CardAction() { Title = "Log in here", DisplayText = "Log in here", Value = "https://login.microsoftonline.com/XXXXXXXX.onmicrosoft.com/oauth2/v2.0/authorize?p=B2C_1_SiUp&client_id=XXXXX-XXXX-XXXX-XXXX-XXXXXXXd&nonce=defaultNonce&redirect_uri=http%3A%2F

Email verification box disappears when passing email from Facebook as input claim to self-asserted profile

我只是一个虾纸丫 提交于 2020-05-16 03:12:53
问题 We want to force users to provide and verify their email address even when they reject passing their email claim from Facebook. We created an orchestration step which calls the following technical profile after coming back from Facebook: <TechnicalProfile Id="SelfAsserted-ConfirmEmailSocial"> <DisplayName>Confirm email social</DisplayName> <Protocol Name="Proprietary" Handler="Web.TPEngine.Providers.SelfAssertedAttributeProvider, Web.TPEngine, Version=1.0.0.0, Culture=neutral, PublicKeyToken

How to add OnTokenValidated event handler when using AD B2C?

半腔热情 提交于 2020-05-15 08:01:07
问题 I am using Azure B2C in a ASP.NET Core 3 application, which is working perfectly. I use the following code in Startup: services.AddAuthentication(AzureADB2CDefaults.AuthenticationScheme) .AddAzureADB2C(options => Configuration.Bind("AzureAdB2C", options)); I would like to handle the standard TokenValidated OpenIdConnect event, with other words I need a configuration where my event handler is set. Examining the source code I see the class AzureAdB2COpenIDConnectEventHandlers.cs and also its

Logging calls to Identity Provider with custom policies in Azure AD B2C

ⅰ亾dé卋堺 提交于 2020-05-15 06:24:33
问题 I'm trying to integrate a custom OpenID Connect Identity Provider in Azure AD B2C using custom policies. However, after being redirected back from the IdP with an authorization code, the custom user flow fails with the following error (using MSAL.js): login failure {"_error":"server_error","_errorDesc":"AADB2C90289: We encountered an error connecting to the identity provider. Please try again later.\r\nCorrelation ID: 97809cc4-04e8-47a3-9263-de57260e7979\r\nTimestamp: 2019-07-18 15:47:32Z\r\n