Microsoft Entra External ID

1 answer

Use Username instead of E-mail in User Flow

In Microsoft Entra External ID, how do we use a username or phone number in a userflow? When adding a new user, we can add a username; but we don't have it as an option in user flows, like we do in Azure B2C. It seems this is missing in Entra External…

asked

Brent Carlson 20

commented

Russell Barnes 0

0 answers

'AADSTS500207: The account type can't be used for the resource you're trying to access' error when trying to access custom scope in an External Tenant

Hello, I am having issues when trying to sign into my External tenant and specifying a custom scope. The error happens when I am making use of the MSAL library but also when attempting to authenticate with Postman or Insomnia. I have set my authority to…

asked

Sam Anson 0

commented

James Hamil 23,136 Microsoft Employee

1 answer

"Requests from this IP are not allowed" Entra ID - external identities sign in/sign up user flow

I created two sites by following each tutorial article below to create a sign up / sign in user flow: https://learn.microsoft.com/en-us/entra/external-id/customers/tutorial-single-page-app-angular-sign-in-prepare-tenant …

asked

Adrian Juwono 0

answered

James Hamil 23,136 Microsoft Employee

1 answer

Clarification on B2C Charging and Monthly Active Users

My API currently uses B2C to manage our external users, and I'm wondering about the costs of B2C and how it works. We have a different directory to manage these users, and when we try to access anything related to the cost, we get a message that says…

asked

hampton123 1,160

commented

hampton123 1,160

0 answers

Rest API technical profile for Azure AD B2C bad request handle

Hi all, We're using a Technical Profile to call Rest API in custom policies for Azure AD B2C. This call sometimes fails due to token change and it's optional to call this to send analytics event, so we would like to handle the Bad request and Ignore the…

asked

Hiep To 20

commented

James Hamil 23,136 Microsoft Employee

1 answer

Is it possible to federate a Workforce tenant with a Customer tenant to achieve SSO for corporate users?

We are developing a customer facing SPA integrated with an External Entra ID tenant and this app will be accessed by corporate users hosted on a Workforce tenant. We haven't been able to find a way to use the Workforce/Corporate credentials for SSO when…

asked

Federico Gallo 0

commented

Federico Gallo 0

0 answers

Unable to invalidate refresh token Azure AD B2C

We use a Python CLI application and we want to invalidate the refresh token after the logout. We have tried to use InvalidateAllRefreshTokens method from the Microsoft Graph API. We get 200 responses instead of 204, as it is stated in the official…

asked

Tanja Tica 0

edited the question

AmaranS 3,860 Microsoft Vendor

1 answer

SSO Azure B2B External Tenant - Enable OTP+MFA if User is already using Azure

Hello Team, For SSO Entra External ID, how can we enable MFA+OTP option in case the customers are already on Azure/Entra? For example - We have our app setup on Microsoft Entra External ID and want to onboard customers for Non-Federated access with Email…

asked

Gaurav Chopra 0

commented

Navya 6,615 Microsoft Vendor

2 answers

Entra ID External invitation failed

Since yesterday, I can no longer invite external users. I have Invitation failed Failed to invite xxxx@xxx.com to the YYYYYY directory. Or User invitation failed Insufficient privileges to perform the operation. But i have all admin roles and rights Can…

asked

PERRUCHE Jean-Claude 0

commented

Navya 6,615 Microsoft Vendor

2 answers

How to call Technical Profile only during SignUp for B2C Custom Policies?

I am using a SignIn SignUp flow for custom policy. I am wanting to call an API to send out email, firstname, lastname only when the user is signing up, not when they are performing a normal sign-in. How do I do this using a Precondition? Here is a…

asked

Nitish Chauhan 76

answered

Shweta Mathur 29,531 Microsoft Employee

1 answer

Authorization broken: .well-known/openid-configuration endpoint issuer does not match the issuer in the token

All of our Entra External ID tenants are currently broken. You have introduced a change that breaks the "iss" field from access token (or the .well-known/openid-configuration is wrong...). We are validating this field in our backend, and the…

asked

Olli-Pekka Heinisuo 45

commented

AchutaNukala-0750 1 Microsoft Employee

2 answers

Why Are Successful Local Account Sign-Ins Not Appearing in Azure B2C Sign-In Logs?

I have an App Services Web App that uses Azure B2C to handle authentication and account management. Only local account sign-in is configured, so the user's credentials are validated each time for the user to be able to sign-in. SSO is not activated. Some…

asked

olpl1543344 21

accepted

olpl1543344 21

0 answers

Azure B2C: Phone number has bad reputation, blocking

Dear Azure-Community-Team, Our customers encounter the same issue as the one provided in the following URLs https://learn.microsoft.com/en-us/answers/questions/1300565/azure-b2c-unblock-phone-number-phone-number-has-ba…

asked

Emilia Marinova 5

commented

Emilia Marinova 5

2 answers

Azure AD B2C Custom Policy as a Federated Identity Provider in AWS Cognito User Pool

I have an Azure AD B2C Custom Policy defined with OpenId Connect. I ahve four custom claims added in the policy and they correctly appear in the response (id_token) of the policy when tested using the B2C Custom Policy 'Run Now' menu in Azure portal. I…

asked

Anand Patil 45

edited a comment

HAOFENG Deng(Pierre) 0

0 answers

Is it possible to federate a Workforce tenant with a Customer tenant to achieve SSO for corporate users?

We have a customer facing SPA integrated with an external tenant and we need corporate users hosted on a Workforce tenant to access the app using SSO with their corporate credentials. Is this something that can be achieved as you would do in…

asked

Federico Gallo 0

1 answer

How to call REST API only during Signup inside Azure AD B2C Custom Policy( Social and Local Accounts)

Hi All, We want to call Rest API inside Azure B2C custom policies(SignUpandSignIn) during Local Account or Social Account SingUp only and skip during SignIn. Could you please let me which claims can I use in Pre-Condition in Orchestration Step to…

asked

Roshan Tolwani 31

edited a comment

Nitish Chauhan 76

9 answers

Azure B2C custom template update not picked up

I have some custom policies I use in my azure b2c client. I made updated to my B2C_1A_TRUSTFRAMEWORKBASE.xml and I uploaded it. When I download it again, it reflects my updates. But when I run my custom policy, I can see it doesn't use my…

asked

Joost Broekhuizen 16

commented

Joost Broekhuizen 16

1 answer

MSAL in .NET 4.8 framework getting null reference error during running embedded browser

I am getting this error in MSAL library for .net for publicclient application microsoft.identity.client version 4.60.3.0 microsoft.identityModel.abstraction. 6.35.0.41 I have entered authenticator code 2 digits number in embedded browser 3 to 4 times…

asked

Dilip kumar 0

edited the question

Dilip kumar 0

1 answer

Does guest user require M365 work or personal account?

Hello, Quick question. When you whitelist @exdomain.ie in your tenant and then send guest invite to user@exdomain.ie, do they require to have M365 work or personal account to access the invite or can the use their own personal non-MS account to accept…

asked

Marek Curda 0

edited an answer

Babafemi Bulugbe 3,135 MVP

0 answers

Unable to Find "Add Partner One ID to Verify Publisher" Option in Azure Portal

Dear Microsoft Support Team, I am currently attempting to mark my application as Publisher Verified in the Azure Portal, but I am unable to locate the "Add Partner One ID to verify publisher" option in the "Branding & properties"…

asked

Bhavya 0

commented

Bhavya 0

Microsoft Entra External ID

Filter

Content

2,759 questions with Microsoft Entra External ID tags

Use Username instead of E-mail in User Flow

'AADSTS500207: The account type can't be used for the resource you're trying to access' error when trying to access custom scope in an External Tenant

"Requests from this IP are not allowed" Entra ID - external identities sign in/sign up user flow

Clarification on B2C Charging and Monthly Active Users

Rest API technical profile for Azure AD B2C bad request handle

Is it possible to federate a Workforce tenant with a Customer tenant to achieve SSO for corporate users?

Unable to invalidate refresh token Azure AD B2C

SSO Azure B2B External Tenant - Enable OTP+MFA if User is already using Azure

Entra ID External invitation failed

How to call Technical Profile only during SignUp for B2C Custom Policies?

Authorization broken: .well-known/openid-configuration endpoint issuer does not match the issuer in the token

Why Are Successful Local Account Sign-Ins Not Appearing in Azure B2C Sign-In Logs?

Azure B2C: Phone number has bad reputation, blocking

Azure AD B2C Custom Policy as a Federated Identity Provider in AWS Cognito User Pool

Is it possible to federate a Workforce tenant with a Customer tenant to achieve SSO for corporate users?

How to call REST API only during Signup inside Azure AD B2C Custom Policy( Social and Local Accounts)

Azure B2C custom template update not picked up

MSAL in .NET 4.8 framework getting null reference error during running embedded browser

Does guest user require M365 work or personal account?

Unable to Find "Add Partner One ID to Verify Publisher" Option in Azure Portal