Unable to sign on using custom policy

Question

Hi,

we use AzureB2C for self service of users and would like to add custom policies.
unfortunately we get the error "The username or password provided in the request are invalid."

After using google, most people write its related to the 2 apps that are needed for custom policies. IdentityExperienceFramework & ProxyIdentityExperienceFramework.
Or using a wrong ID in TrustFrameworkExtensions.xml

I've checked it now 10 times and cant see the error :-( Hopefully someone can have a 2nd look and see what I do wrong?
Also - maybe - I do the SignUp Test with one of the working Applications under "Applications (Legacy)". As I cannot choose any App registrations "Apps".

Attached the Manifest & Logs.

Thanks and regards
Tobi

26137-signuporsignin.xml

26211-trustframeworkextensions.xml

26182-logs.txt

26183-proxyidentityexperienceframework.txt

26184-identityexperienceframework.txt

Answer 1

I had the similar issue. In order to make it work, I had have to deleted IdentityExperienceFramework and ProxyIdentityExperienceFramework applications created under b2c "blade" and re-created them under AAD although they look similar, but somehow it is different.

This also means that before doing this step https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows?pivots=b2c-custom-policy#register-the-identityexperienceframework-application and this one https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows?pivots=b2c-custom-policy#register-the-proxyidentityexperienceframework-application navigate to AAD and then to App registrations to create these two items.

Answer 2

Please recreate both your IEF applications following the steps detailed in Register Identity Experience Framework applications. Regarding the B2C app follow Tutorial: Register a web application in Azure Active Directory B2C.

--
Please let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.

Answer 3

In addition, as i can create users, i found this errors via the Azure AD User Log:

• The application was not found in the directory. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.
  • Failure reason Application with identifier '{appIdentifier}' was not found in the directory '{tenantName}'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.