azure-ad-b2c

How do you add a user with a local name in Azure Active Directory B2C?

那年仲夏 提交于 2019-11-28 04:07:45
问题 I've got an Azure Active Directory B2C up and running and can sign in with users created in the AD that have the form of @.onmicrosoft.com. So, for example, john.smith@myorganization.onmicrosoft.com , works just fine. But these user names are unacceptable for external use. I've also got basic Microsoft Account logins working, so a user with the name of john.smith@comcast.net will work by redirecting through the Microsoft directory. But I want to allow arbitrary emails for logins. Using the

Change Azure AD B2C User Password with Graph API

故事扮演 提交于 2019-11-28 03:24:53
问题 I'm trying to use the Sample Graph API app to change a user's password but I'm getting: Error Calling the Graph API Response: { "odata.error": { "code": "Authorization_RequestDenied", "message": { "lang": "en", "value": "Insufficient privileges to complete the operation." } } } Graph API Request: PATCH /mytenant.onmicrosoft.com/users/some-guid?api-version=1.6 HTTP/1.1 client-request-id: ffd564d3-d716-480f-a66c-07b02b0e32ab date-time-utc: 2017.08.10 03:04 PM JSON File { "passwordProfile": {

B2C - Open registrar form instead login form

被刻印的时光 ゝ 提交于 2019-11-28 02:24:37
I am using Azure B2C authorization for my single app Azure functions. I allowing user to login with google account or with user name / password. In order to show login page I used msal library. Now I have a situation, where I want to show user the registration page directly, and not first the login page and then he have to click create new account. Is there a way to do it? with msal or a different library? Nope, but you can create a "Sign up policy" and link directly to that. 来源: https://stackoverflow.com/questions/45724207/b2c-open-registrar-form-instead-login-form

Sign-up policy - Set user attributes through code

半世苍凉 提交于 2019-11-28 00:32:41
I want to programatically set user attributes for the sign up policy. I saw a previous question ( Pass parameters to Sign-up policy ) asked over a year ago and it was not possible at the time. Any update on this? Is this possible with the AuthenticationProperties.Dictionary property? Something like this? HttpContext.GetOwinContext().Set("Policy", Startup.SignUpPolicyId); var authenticationProperties = new AuthenticationProperties(); authenticationProperties.Dictionary.Add("myattribute", "myvalue"); HttpContext.GetOwinContext().Authentication.Challenge(authenticationProperties); This can be

Azure AD B2C pre-populate a custom attribute in the SignUp policy

北城余情 提交于 2019-11-28 00:16:19
Does Azure AD B2C support pre-populating a custom attribute in the SignUp Policy when called from the Web application (ASP.Net MVC)? We can create a custom SignUp attribute but we weren't able to find a specification in the documentation how to pass value to populate the custom attribute. If this is not supported out of the box, does anybody found a workaround? Here are some more details for the context in case somebody has faced a similar scenario and found a useful solution: We explore the options to solve the following scenario with Azure AD B2C: a registered user invites another person to

What's the difference between Azure AD B2C tenant and normal Azure AD tenant?

我只是一个虾纸丫 提交于 2019-11-27 23:50:46
I've seen so many people are very confused about what we can do in Azure AD B2C tenant and the difference between a B2C tenant and normal Azure AD tenant. The main questions are: What's the difference between Azure AD B2C tenant and normal Azure AD tenant? Since I can even use some features in B2C tenant, such as Azure AD Connect, buy a new subscription in B2C tenant and use it and so on, Should I use these features? Why give me these features in the B2C tenant? Why not just use B2C in normal Azure AD tenant? Azure AD B2C tenant is just for using Azure AD B2C feature. Azure AD B2C feature(not

headless authentication Azure AD b2c

陌路散爱 提交于 2019-11-27 15:28:31
I am looking for a way to authenticate a user by username/password in a headless manner for Azure AD b2c. Azure AD b2c is great but we feel the redirects for logins can lead to confusion among customers (and sometimes even prevented by some browsers). Also we want to be in full control of the customers UX experience. I have researched ADAL and the Graph API but have not found anything yet. Gina Michael B It is not currently possible to run Azure B2C without an interactive user present. While I am sure it will arrive at some point, at present, you can't create back-end applications based on B2C

Multi-tenant Azure AD in Azure AD B2C

ぐ巨炮叔叔 提交于 2019-11-27 15:22:41
问题 I was following the answer here: Multi-Tenant Azure AD Auth in Azure AD B2C with Custom Policies And the walkthrough here: https://github.com/Azure-Samples/active-directory-b2c-advanced-policies/blob/0129fc013ae5e66a3ee0046a5d0db2e8120d8f8e/Walkthroughs/IdP-AzureAD.md But I wasn't able to login, the error message is something along the line: AADB2C: An exception has occured. Correlation ID: <GUID>. Timestamp: <Time> Furthermore, when viewing the walkthrough in latest master, the whole page

Recommended way to automate deplyoment of Azure AD B2C instance?

隐身守侯 提交于 2019-11-27 07:25:48
问题 What is the recommended way of automating the configuration of an Azure AD B2C instance, e.g. configuration of policies, application registrations, maybe even creating initial accounts? Is it possible to use an ARM Template for it? If so, where can I find a quick-start sample? Is it possible to do in a programmatically way, i.e. using PowerShell? If so, where can I find some sample? Usage scenario: setting up either an ARM Template or Script to deploy (update) to several environments. Thanks

Azure AD B2C - “emails” claim in custom policy

半城伤御伤魂 提交于 2019-11-27 06:56:40
问题 I'm looking for a way to add an emails claim (collection of emails) to a custom policy for Azure AD B2C. This application claim is available from the Azure Portal directly but I cannot find a way to implement this in a custom policy which I need to create. What I want to achieve is to have Azure AD B2C authentication for my WebApp users and Azure AD authentication as custom Authentication Provider for employees so It means I will need to add emails claim twice - for Local accounts and for