How to add security groups (without Entra roles) to the access token?
I have a SignUpSignIn user flow. The app registration that is linked to the user flow has "groupMembershipClaims": "SecurityGroup" in its manifest. As the documentation mentions, the groups claim will contain security groups and…
Microsoft Entra External ID - Customers - how to trigger sign-up flow from link
Hi - I'm using External ID in an external tenant (customer) and wanting to provider a "sign up" link in an email. Ideally that would also prepopulates the users email address. I've trying setting the "prompt=signup" in the oauth…
How do I change the root user to another user in Azure, including all permissions, email triggers, and settings? I also need to remove the existing root user.
How do I change the root user to another user in Azure, including all permissions, email triggers, and settings? I also need to remove the existing root user. please give me proper steps with examples.
How to migrate between Teams without interfering with external access?
Needing to move folders and files from one Team to another, but this is problematic as the content is shared with various external contacts related to some established workstreams. Is there is way to migrate these to another Team without breaking the…
Refresh Token Lifetime Issue, Expiring in 1 Day Instead of 7?
I've set the lifetime of my B2C refresh token to 7 days. I'm using the PKCE authentication flow to obtain access tokens. However, when I make a request to the /token endpoint, I notice that the refresh_token_expires_in value is 86400 seconds, which is…
Invalid code_verifier in PKCE Flow for OAuth2 Authorization
Hi, I'm currently trying to use the PKCE (Proof Key for Code Exchange) method of obtaining an access token outlined on this Microsoft tutorial. Whenever I try to login to B2C to obtain the authorization code, I receive the following error after logging…
Microsoft Entra External ID authentication and multi-tenant application
Hi, We have a mutli-tenant app registration in our organization portal.azure.com We also created a Microsoft Entra External ID which we invite our customer into. The customer have a Microsoft Entra ID account and receives the email invitation, accepts…
Trying to sign to linkedin profile from Outlook
Hi, Im tryiring to sign from MS outlook to linkedin to see paired profiles. I`m on contact, hitting the button show more from LinkedIn / link your account and error appear: Request Id: 1feeecb8-d11b-4621-bacb-be135a4a6500 Correlation Id: …
Azure AD B2C As a Federation with multiple identity providers
Hi, I have an application 'SampleApp' which is using Azure AD B2C for authentication purpose. The 'SampleApp' application is being used by two types of users - employees & customers. Both employee and customer users are part of different AD instances…
![](https://learn.microsoft.com/en-us/media/profile/user-copilot.png)
Azure AD B2C Custom Policy as a Federated Identity Provider in AWS Cognito User Pool
I have an Azure AD B2C Custom Policy defined with OpenId Connect. I ahve four custom claims added in the policy and they correctly appear in the response (id_token) of the policy when tested using the B2C Custom Policy 'Run Now' menu in Azure portal. I…
REST API integration in Azure AD B2C Custom Policy
I am trying to call Token endpoint for B2C Custom policy. When verified through postman, I am able to successfully call the endpoint. The parameters used in this postman request are as seen in the attached image. I want to integrated this endpoint in my…
Calling Token Endpoint of B2C Custom Policy
I have an Azure AD B2C Custom Policy. I have the urls' for all of its endpoints. In this policy, in the 'TrustFrameworkExtensions' xml, I want to integrate the 'Token' REST endpoint for this policy itself. First of all, is it doable ? I am trying to do…
Incorrect error message in Azure UI when adding a "Domain name of federating IdP"
Hello - I'm having issues setting up SAML External Identity provider. First, I found a bug: when I add a "Domain name of federating IdP" to an existing SAML Identity Provider, and that there's an error, the message is always:"Failed to add…
Cannot log in to Azure Portal - More information required - Next button does nothing
When I attempt to log in with my personal microsoft account to my own personal tenant on Azure, I get a page that says: "More information required. Your organization needs more information to keep your account secure." It has one option,…
![](https://techprofile.blob.core.windows.net/images/dHM0RwOD3EybNhI6iirdTQ.png?8DACD8)
Managing Azure Ecosystem and users after September 1st and managing MFA obligation starting after 15 October on a personal Azure account with no professional MS account
Hi, I have several questions regarding how I use Azure currently and enabling MFA on tesing out Azure on a private personal environment. That personal environment hasn't got anything deployed at the moment, and no subscriptions either apart from a…
Changing domain of azure subscription to domain purchased from Godaddy
Hi Everyone, I have purchased the domain from Godaddy, I want to change the domain subscription of my azure portal to this new domain. And another question as i have created multiple new email-id's for this newely created domain on google workspace.…
The differences between Tenant type Workforce and Azure AD B2C
From the https://entra.microsoft.com/#view/Microsoft_AAD_IAM/DirectorySwitchBlade/subtitle/ What are the differences between Tenant type Workforce and Azure AD B2C? Can we migrate from the Workforce to Azure AD B2C?
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
Custom control SSPR in Entra
When will we see custom control for SSPR in Entra so that we can use 3rd party apps for verification process.
Entra External ID - Migration Options
I need to migrate users from an on prem Auth provider, where I am not able to access the passwords (On way hashed) to Entra External ID, Is there away in Entra to valid the user against the on prem auth when signing in and then move the password to Entra…
How to add private IP address in the Journey framing in the relying party in Azure AD B2C custom policy?
Hello, I am currently setting up a custom policy for my application using Azure AD B2C with Identity Experience Framework to customize the Sign In and Sign Up flows. However, I encountered an error message while uploading the custom policy in Azure AD…