Azure AD B2C - SAML auth with MFA

Question

Hello everyone,
I was able to correctly configure a custom policy for the registration and login flow with SAML on my B2C tenant.

I attach the files I modified for simple SAML login and authentication flow.

254707-b2c-1a-trustframeworkextensions.xml
254708-b2c-1a-saml2-signup-signin.xml

Now, however, I would also like to add the MFA option using this sample policy: https://github.com/azure-ad-b2c/samples/tree/master/policies/mfa-email-or-phone

I can't figure out how I could do it, I can't find much documentation.

Answer 1

Resolved.

If anyone is interested, I uploaded the TRUSTFRAMEWORKEXTENSIONS.xml file used and the relying party xml file.

255208-b2c-1a-trustframeworkextensions.xml
255209-b2c-1a-saml2-signup-signin-mfa-phonesms.xml

Answer 2

@Denis Dal Molin Apologies for the delay in answering this post.

I'm glad that you were able to resolve your issue and thank you for posting detailed steps which helped to resolve this issue, so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others" https://learn.microsoft.com/en-us/answers/support/accepted-answers#why-only-one-accepted-answer, I'll repost your solution in case you'd like to "Accept" the answer.

Below answer provided by @Denis Dal Molin

I uploaded the TRUSTFRAMEWORKEXTENSIONS.xml file used and the relying party xml file.
255408-b2c-1a-trustframeworkextensions.xml
255476-b2c-1a-saml2-signup-signin-mfa-phonesms.xml