Azure B2C Sign up allows user to sign up with existing email

Tue Nguyen 0 Reputation points
2023-08-20T17:15:24.4766667+00:00

Hi,

I have a Sign Up user flow in Azure B2C as followed.
User's image

I'm still able to sign up with an existing email address which should not allow me to.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,905 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Shweta Mathur 29,761 Reputation points Microsoft Employee
    2023-08-22T07:24:22.7233333+00:00

    Hi @Tue Nguyen ,

    Thanks for reaching out.

    To prevent users from signing up with an existing email address, you can enable email verification during the sign-up process. By default, Azure AD B2C verifies your customer's email address for local accounts (accounts for users who sign up with email address or username). Azure AD B2C ensures valid email addresses by requiring customers to verify them during the sign-up process.

    User's image

    Alternatively, if you are looking to avoid users signing up with the same email address when they sign up with an identity provider (IdP), you can use the account linking feature in Azure AD B2C. Account linking allows users to link their existing local account with their new IdP account. This way, users can sign in with either their local account or their IdP account, and their profile information is shared across both accounts.

    Reference - https://github.com/azure-ad-b2c/samples/tree/master/policies/account-linkage-at-signup

    Hope this will help.

    Thanks,

    Shweta


    Please remember to "Accept Answer" if answer helped you.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.