Entry / Azure AD for Customers: Customer email address not captured on sign-up

Marco vanW 76 Reputation points
2023-08-03T20:53:47.2966667+00:00

Hi,

I am evaluating currently Entra External ID / Customer IAM and compare it with Azure AD B2C. One thing that I can't get to work with the simplest of examples is to populate Entra's user's email field, when that user signs up with a simple User Flow (where the email field is a mandatory user attribute and verified during sign up using the OTP authentication provider as well). When I go to Entra > Identity > Users and look up the new user, the email field (and other emails field for that matter) are empty. What am I missing?

Thanks!

-Marco

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,884 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Shweta Mathur 29,746 Reputation points Microsoft Employee
    2023-08-08T05:49:32.96+00:00

    Hi @Marco vanW ,

    Thanks for reaching out and apologies for the delay in response.

    Microsoft Entra External ID for customers /Customer identity access management (CIAM) is a new product in Microsoft Entra to manage external identity use cases.

    In CIAM, customer accounts are mostly created programmatically when users sign up through an application.

    I tried to sign up the user using the application as mentioned here and was able to get the user email in the claim preferred_username as I sign-up with email.

    User's image

    and the same email value has been reflected in the user properties(Email) as well.

    User's image

    However, if you created the customer directly in the portal, then user's properties are not reflected. We are working on that, but the expectation is as CIAM is for customers, customers should self-sign up through the application.

    If you are also trying to sign up the user through an application and facing issues while doing so, please share the reference link of the application you are using along with screenshots to help you further.

    Hope this will help.

    Thanks,

    Shweta


    Please remember to "Accept Answer" if answer helped you.


  2. Marco vanW 76 Reputation points
    2023-08-13T10:17:22.3233333+00:00

    @Shweta Mathur When I create an out-of-the-box User Flow and select Email Account > OTP as Identity Provider, then the ID token does contain the email claim. When I select Email Account > Password it does not. Now I would like to know whether this is by design or something that still needs to get ironed out.

    Thanks!

    -Marco


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.