azure-ad-b2c

Azure Ad b2c: Get email in Claims after successfully Signin in azure ad b2c

旧城冷巷雨未停 提交于 2019-12-05 18:25:08
I am using starter pack of custom polices with SocialAndLocalAccounts pack. It is working fine for me. But I am facing one issue.I need to get email as claim after successfully login. I am getting email as claim, once user has been been signed-up and redirects back immediately to application. but I am not getting it when a user simply signs-in. How can I get that? where do I need to write an Output Claim to get the value of email in claim? Kindly help me. Thanks Following describes how you can save, load, and then issue the otherMails claim as emails from the sign-up/sign-in and password reset

How to configure SSO for Azure AD B2C?

﹥>﹥吖頭↗ 提交于 2019-12-05 15:52:51
As per Azure AD B2C documentation we can configure SSO for Azure AD B2C application. We want our user to do self-registration for the application thus opted for AD B2C. However after creating B2C tenant account and configuring all the policies. I am unable to find option to configure SSO. Since after 30th Nov 2017, Active Directory will only be available in new portal. Kindly provide reference wrt new portal. . Any help will be appreciated. Thanks in advance. As the document in the your question said,if you have multiple applications and policies in your B2C tenant, you can manage user

Secure API with Azure AD/B2C users

北城以北 提交于 2019-12-05 11:01:31
My use case is: Create users via API with custom fields, nominated password using any email address Update/disable those users via API 'Sign in' to Azure AD app with user details via rest API to obtain token Make authorised requests to Web API when token passed in Http header Can all of this be achieved with straight Azure AD/B2C or should I be looking at some other identity provider e.g. IdentityServer/Auth0? Edit 1 I'm getting very confused between AAD apps/users and B2C apps/users, there is very little guidance on what to use in this case. Using https://docs.microsoft.com/en-us/azure/active

How to store claims from IdentityServer 3 in Azure AD B2C or just include it in tokens issued by AAD B2C

隐身守侯 提交于 2019-12-05 07:28:15
问题 I'm wondering if it is possible to propagate an oid claim or basically any other claim issued by Identity Server 3 to the AAD B2C and make it be a part of the token issued by Azure AD B2C? We need to have an original ID on the client side and all we can get from sub and oid claims is an ID of an AAD B2C user account. I would also like to do the same with roles claim. Any help would be much appreciated. [EDITED] Here is how TechnicalProfile of my Identity Server configuration look like in

Azure AD B2C - Refresh_Token refresh claims via REST (Identity Experience Framework)

天涯浪子 提交于 2019-12-05 02:57:09
问题 We have Azure AD B2C setup to use Identity Experience Framework, and on sign-in/sign-up a REST call is made to get extra security credential claims via an Azure Function. This works fine. When we request an Access/Id Token via Refresh_Token via Azure AD B2C it looks like we get the same token back, and it doesn't call the REST API to get the latest updated token claims. Is it possible to make change this User Journey so it does? Is there another solution to refresh token without logging in

how to get Facebook profile picture using Azure AD B2C

余生颓废 提交于 2019-12-05 00:47:33
问题 I am using MSAL.js and could successfully sign-in/sign-up users in Azure AD B2C using Facebook as identity provider. The problem is that after sign-in I cannot retrieve user's profile picture. Azure AD B2C returns an object identifier which has no tie to user's Facebook id. 回答1: Using custom policies, you can retrieve the picture field for the Facebook user and then issue a picture claim in the ID token, as follows. 1: Complete the Azure Active Directory B2C: Get started with custom policies

Invalid usename or password when sigining local account with Azure AD B2C Custom Policy

若如初见. 提交于 2019-12-04 15:52:31
问题 Scenario: When I started to do a test with AAD B2C Custom policy, I used this sample: active-directory-b2c-custom-policy-starterpack/SocialAndLocalAccounts/ I referred to this documentation to get started. I followed those steps and changed some values in the samples and have double checked the client_id and resource_id. When I tried to run the signup or signin policy, I failed to signin with a local account with error: (Though I can signin with soical account) Invalid username or password I

Azure AD B2C SignUp-SignIn policy with MFA turned on - Custom Login Page

泄露秘密 提交于 2019-12-04 15:44:59
I have an asp.net web application that authenticates via Azure AD B2C tenant. I have a sign-up-sign-in policy [login is using username instead of email] with MFA turned on. I have also setup Custom UI login page [unified.html] and MFA page [phonefactor.html] in a storage blob that the policy points to. I am able to authenticate the user via the custom login page and login with MFA. The issue is when I create a new user and force the user to change the password at their first login, instead of redirecting the user to the change password screen, I am getting an invalid username and password

AADB2C90077: User does not have an existing session and request prompt parameter has a value of 'None'

非 Y 不嫁゛ 提交于 2019-12-04 12:36:59
I have an Angular app that uses MSAL.js and when I try to get an access token I'm receiving the following error: AADB2C90077: User does not have an existing session and request prompt parameter has a value of 'None'. I was passing the wrong scope value; I had a typo in my tenant name: this.userAgentApplication.acquireTokenSilent('https://{tenantname_with_typo}.onmicrosoft.com/webapi/read') 来源: https://stackoverflow.com/questions/47823447/aadb2c90077-user-does-not-have-an-existing-session-and-request-prompt-parameter

Fetch ClaimType Enumerations via REST

南楼画角 提交于 2019-12-04 12:24:46
We're happily enriching our claims via custom RESTful API, but is it possible to instead display the fetched claim values (comma delimetered, for example) in a drop-down and ask used to pick one? <ClaimType Id="city"> <DisplayName>city where you work</DisplayName> <DataType>string</DataType> <UserInputType>DropdownSingleSelect</UserInputType> <Restriction> <!-- FETCH THESE VIA REST --> <Enumeration Text="Bellevue" Value="bellevue" SelectByDefault="false" /> </Restriction> </ClaimType> 来源: https://stackoverflow.com/questions/49253190/fetch-claimtype-enumerations-via-rest