Generating an access token from an ID token - Custom policy

Question

Generating an access token from an ID token - Custom policy

roshin.thomas 6

I am using a id_token to pass information to AD B2C to bootstrap a user-journey from a link (similar to email sign in ) .

The url-builder creates a link

https://tenant.b2clogin.com/tenant.onmicrosoft.com/oauth2/v2.0/authorize?p=B2C_1A_SIGNIN_WITH_EMAIL&client_id=9----f8a-67890&redirect_uri=https://myapp.com/&nonce=9e4d18.....8302445a8069a&scope=openid&response_type=id_token&id_token_hint=eyJhb......

I have the policy B2C_1A_SIGNIN_WITH_EMAIL that would read the user info from the email and issue a token .

I am expecting the user to be able to signin to the application with the token generated from the policy. But currently it reads the user, creates the id_token but since no token is generated application goes to login prompt.

The policy is below :

Thanks

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-01-10T09:46:55.677+00:00

Hi @roshin.thomas ,

Thanks for reaching out.

I understand you are trying to get the access token using custom policy.

I am not able to find that you are passing id token in any of the input claim to get the access token.

Coud you please confirm or share that reference you are using to get the access token?

Thanks, Shweta
roshin.thomas 6 Reputation points

2023-01-10T10:28:22.333+00:00

Thank you for your response.

I am following the post here - https://medium.com/the-new-control-plane/using-a-jwt-to-invoke-an-azure-ad-b2c-flow-using-id-token-hint-13752ee6d9df

My requirement is to be able to Sign In to my current application from a "magic link" (link in step 1) . (In the above flow email link --> signIn to application) , for the same I am using the above policy (SigninWithEmail.xml in the post modified with my additional claims).

Are there any further steps that I need to follow ?

Thanks, Roshin

1 answer

Your answer

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-01-10T09:46:55.677+00:00

Hi @roshin.thomas ,

Thanks for reaching out.

I understand you are trying to get the access token using custom policy.

I am not able to find that you are passing id token in any of the input claim to get the access token.

Coud you please confirm or share that reference you are using to get the access token?

Thanks, Shweta
roshin.thomas 6 Reputation points

2023-01-10T10:28:22.333+00:00

Thank you for your response.

I am following the post here - https://medium.com/the-new-control-plane/using-a-jwt-to-invoke-an-azure-ad-b2c-flow-using-id-token-hint-13752ee6d9df

My requirement is to be able to Sign In to my current application from a "magic link" (link in step 1) . (In the above flow email link --> signIn to application) , for the same I am using the above policy (SigninWithEmail.xml in the post modified with my additional claims).

Are there any further steps that I need to follow ?

Thanks, Roshin

Answer 1

Stephen Ebichondo 0 Microsoft Employee

Hi @roshin.thomas you could follow the steps as detailed here.

Share via

Generating an access token from an ID token - Custom policy

1 answer

Your answer