ADB2C | Custom Policies and Refresh Token

Question

Hi,

We have a login form which is the custom policy page on ADB2C. The login form has a Keep me signed in checkbox.

After logging in, the custom policy provides us an access token and refresh token. The checkbox value : true or false is send as part of a claim in the token.

so the access token has the claim "checkbox" as "true" when checked.

Now, when I hit the refresh token api, I get another refresh token and access token. This time the access token has the "checkbox" value as "false" - but the expected value is the same which should be "true"

Can you let me know how to achieve this ?

Answer 1

Hello @Abhay Chandramouli , the Azure AD B2C KMSI (keep me signed in) checkbox state is available only during interactive authentication requests. Requesting new tokens using a refresh token is done in a non-interactive way and thus will always return a false value for the aforementioned KMSI claim.

One potential woraround would involve adding a refresh token journey to your Custom Policy, passing the original issued token (with the KSMI claim set to true) as a query param, read it using claims resolvers, decoding it using a custom API and outputing the original KSMI value.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

Answer 2

your text