azure-ad-b2c

link user flows in react js application

我只是一个虾纸丫 提交于 2019-12-23 16:35:52
问题 I am using own custom HTML page for my user flows in azure adb2c. I am using react js adb2c libraries in my application. In signup and sign in v2 user flow, there is an option for forgot the password, but the link doesn't take me to my password reset user flow. Error in console: access_denied:AADB2C90118: The user has forgotten their password. I am not getting any samples in react js to solve this issue. This error is thrown from the react-azure-adb2c library. Any suggestion will be great.

Azure Active Directory B2C Custom Invite Policy - Passing Custom Claims Between Steps

£可爱£侵袭症+ 提交于 2019-12-23 15:40:06
问题 I have implemented an invite policy (invite users to the site by sending them an email link) via this example https://github.com/azure-ad-b2c/samples/tree/master/policies/invite I have this user journey <UserJourney Id="SignUpInvitation"> <OrchestrationSteps> <OrchestrationStep Order="1" Type="GetClaims" CpimIssuerTechnicalProfileReferenceId="IdTokenHint_ExtractClaims" /> <OrchestrationStep Order="2" Type="ClaimsExchange"> <Preconditions> <Precondition Type="ClaimsExist" ExecuteActionsIf=

Unable to access a WebApi from a MVC Web app where both are secured by Azure AD B2C

最后都变了- 提交于 2019-12-23 15:39:33
问题 I have a web app (MVC) and a WebApi that are both secured by ADB2C in the same tenant. The web app wants to call the WebApi with a simple HttpClient. This is .NET Core 2.1 with the latest Visaul Studio project templates. The following points can be made: I can successfully sign in and sign up to the web app using B2C. I am soley using the new .NET Core 2.1 template where B2C is scaffolded into the project with minimum code. I create the WebApi project using the wizard also (this tiem for a

Graph API request returning “One or more properties contains invalid values”

只谈情不闲聊 提交于 2019-12-23 01:43:12
问题 I am trying to execute B2C user creation on our company's Azure Directory. As reference, I use this site from Microsoft, and the .DotNet example in it. https://azure.microsoft.com/en-us/documentation/articles/active-directory-b2c-devquickstarts-graph-dotnet/ I thoroughly follow the example, and I get to the point where I get authenticated, and I am able to extract the AD users in the directory. Here is the sample request I generated. GET https ://graph.windows.net/mycompany/users?api-version

Sign in with Apple guide - the metadata endpoint is already in use by an identity provider

試著忘記壹切 提交于 2019-12-23 01:09:17
问题 Following the guide Setting up Sign in with Apple as a Custom OpenID Connect identity provider I get to the end, I click Save and I get the error: "The issuer 'https://appleid.apple.com' found at the metadata endpoint {my endpoint} is already in use by an identity provider." What am I missing? Is the guide still valid? This question have also been raised as an issue on GitHub. 回答1: This error is shown when you have two custom identity providers, the metadata point for which have the same

Example of sending claim to azure-ad-b2c policy from JS single page application

孤街浪徒 提交于 2019-12-22 14:15:00
问题 I'm using msal js library to redirect SPA to b2c policy. I can't find an example of sending some custom claim to the b2c policy (like extension_Brand) from javascript application. What I have found is .NET example: https://github.com/Azure-Samples/active-directory-b2c-advanced-policies/blob/d62c3f9e573ac8b5a9adc1565c6254f632e2a531/wingtipgamesb2c/src/WingTipMusicWebApplication/Startup.cs#L108 But it uses .NET library. Which JS library can send claim to the b2c policy? 回答1: There are no JS

Azure AD B2C Linkedin claims provider

*爱你&永不变心* 提交于 2019-12-22 12:33:06
问题 I am implementing the Linkedin sign-up/sign-in via custom policies but when I click on the LinkedinExchange button, I get the following exception from the User Journey Player: An exception was caught when making a request to URL "https://api.linkedin.com/v1/people/~:(id,first-name,last-name,formatted-name,email-address)" using method "Get". The exception status code was "ProtocolError" with the following message: The remote server returned an error: (401) Unauthorized.. The remote server

Costs of B2C and Refresh tokens

淺唱寂寞╮ 提交于 2019-12-22 12:21:14
问题 I'm not sure I'm understanding this properly, but here goes: Since MSA and Google tokens expire every hour, the only way for my app to reflect changes in the user's permissions on the MSA and Google site would be to refresh the EasyAuth B2C token on roughly the same interval, right? If they revoke access to my app, then they probably don't want unexpired tokens rolling around for days. And each time I need to refresh that token, another refresh call is made to B2C and then on to the identity

Azure AD B2C get token programatically for unit testing

好久不见. 提交于 2019-12-22 10:56:31
问题 My scenario is simple I have a simple Azure Function with B2C authentication on it and I'm writing unit tests but I found an issue, I'm not able to authenticate to the azure functions programmatically. I'm able to access through the browser and even I can grab the token and put it into the unit test and it works fine, but when I try to generate a token using the ClientID, TenantID, etc. I get a token, but 401 Unauthorized response on the Azure functions. Is there a way to generate a valid B2C

How do I read the NameID element as a claim in a B2C TechnicalProfile for a SAML2 identity provider?

孤街醉人 提交于 2019-12-22 10:55:04
问题 I followed the example in Set up sign-in with a Salesforce SAML provider by using custom policies in Azure Active Directory B2C and was able to successfully SSO from Salesforce into Azure B2C. However, I would also like to retrieve the value of the NameID element from the SAML Assertion as a claim. Is this possible? For example, say that the incoming SAML 2.0 Assertion posted to B2C's assertion consumer endpoint looks something like this simplified XML. <saml:Assertion> <saml:Issuer>https:/