azure-ad-b2c

Can I use SVG within a customized the Azure AD B2C user interface?

拟墨画扇 提交于 2019-12-10 16:12:56
问题 I am building a customized Azure AD B2C user interface. I have included a SVG tag within my page. <body> <div class="container"> <div class="row"> <div class="col-md-12"> <svg width="100" height="100"> <circle cx="50" cy="50" r="40" stroke="green" stroke-width="4" fill="yellow" /> </svg> <div id="api"/></div> </div> </div> </div> </body> If I visit the page directly the SVG tag renders as expected. If I visit the page within the Azure AD B2C flow the SVG tag is omitted. Is SVG supported

How to force change password after first login

雨燕双飞 提交于 2019-12-10 13:52:36
问题 I have a Azure Active Directory B2C tenant. I also have a small service that creates new users in the B2C tenant from a different system. This way I can synchornize both systems. When a user has been added to B2C and logs in the first time, I want the user to be forced to change the password. But whatever I do, the user can just log in and continue, without changing the password.. To add a user to B2C, I use the Microsoft Graph 1.14 package. I push the user information as JSON to the endpoint

Changing Azure AD B2C Sign-up or sign-in policies's forgot password link

天大地大妈咪最大 提交于 2019-12-10 12:16:49
问题 When using Sign-in policies, there is a password reset link => "Can’t access your account". By click on this link, the users get Microsoft's out-of-the-box password reset process in which they are presented with a CAPTCHA to receive validation code and for which I can require MFA. I want to reuse this feature on the unified "Sign-up or sign-in" policies which present a different link for this => "Forgot your password". I want that link to redirect to Microsoft's out-of-the-box password reset

Custom sign-in page for Azure AD B2C doesn't load on Chrome & Firefox

泄露秘密 提交于 2019-12-10 10:45:29
问题 We customised our Azure AD B2C tenant's Combined Sign-Up/Sign-In Policy to serve up our own login page. This worked across all the major browsers when we tested last week, but it stopped working today for some of our users on Chrome and Firefox. We are getting this 404 error when some of our users browse to our home page and they get redirected to the login page (our B2C tenant and custom login URL is redacted but all other query parameters are unchanged): https://login.microsoftonline.com

Azure B2C - Multiple Reply Url

自作多情 提交于 2019-12-10 10:04:57
问题 I created a Native Client App with Web/WebAPI in Azure B2C I want to add multiple reply urls with the same domains for testing and qa etc. e.g. https://site.domain.com https://site-qa.domain.com/ But got error: Cannot update Application: One of the reply URLs provided for application 'My App' is on a domain different from other reply URL(s). Plese make sure all reply URLs other than localhost are on the same root domain. Also note: 'Plese' is miss-spelled 回答1: It seems to be an issue, I have

Azure Ad b2c : Add new member user with invitation

有些话、适合烂在心里 提交于 2019-12-09 13:28:14
问题 I have an Azure Ad b2c running up on Azure and I want to create user with inviations in B2C.I tried by creating Guest user but that user is unable to login. because that user is created as B2B user. I also tried by adding user manually. but I am not able to add my own domain. eg. user@xxxx.onmicrosoft.com . but I want to create user@gmail.com . I googled it a lot and I found that i have to add a custom domain for that. when I tried to do so I found that I have to register my domain in DNS

Azure AD application with Global Administrator rights

荒凉一梦 提交于 2019-12-08 15:19:31
So I am trying to set up an application on azure AD that can, among other things delete users. I have the application registered and use the client id and secert to gain teh access token. I was able to give the application permissions to create users and that works fine, but when i go to delete over the graph API i get a 403 Insufficient privileges to complete the operation. I am trying this over the graph rest API. The user that i am attempting to delete was made through the rest call as well. The user is in the same tenant as the application , so i am not trying to delete users from multiple

Azure B2C MFA at User level and Sign-In Policy level

萝らか妹 提交于 2019-12-08 13:37:16
问题 I have a web application that authenticates with my B2C tenant with MFA turned on at the Sign-In Policy level [at this point MFA is disabled at User Level] and the policy is configured to use "username" to login. The application works fine and the user is able to login ... What I am trying to accomplish is to have MFA at user level meaning only certain users will be able to use MFA while others will be able to login without MFA. The problem that I am facing is, when I turn on MFA at User

Error AADSTS50034 when attempting to change password for local Azure AD B2C users with a username from an external domain

怎甘沉沦 提交于 2019-12-08 12:22:36
问题 I am working on Azure AD B2C for my Angular 6 front-end App and consuming Microsoft Graph API in order to change the singed-in user's password. I am getting the access_token using the Authorization Code flow. It works fine when the user has a username like xyz@myb2cname.onmicrosoft.com , I get an access_token and then call https://graph.microsoft.com/v1.0/users/{id}/changePassword . But when I try to do the same for users with a username like xyz@gmail.com or abc@hotmail.com , I get an error

How do you authenticate AAD B2C using MSAL?

不羁的心 提交于 2019-12-08 11:03:19
问题 I have a working version of a Client/Server authentication using ADAL. However, it appears that the B2C AAD doesn't work well with ADAL when you want to use Local Accounts (that is, just a username or just an email address with no backing authenticator other than AAD). It appears the API we should be using for Local Accounts is the alpha release of MSAL. So far, so good. I'm able to create a local user using the Graph API and using the following code, I appear to be authenticating the local