How to enable deletion of a signed-in user's account for Azure AD B2C phone sign-up/sign-in

Question

What is the simplest method of enabling self-service user account deletion for Azure AD B2C phone sign-up/sign-in flow with local accounts only?

This is only for development purposes, so it can be quick-and-dirty. The solution does not need to be exposed to the end-users directly, but rather for developers to be able to iterate on the sign-up process i.e. sign-up, delete account - rinse and repeat.

I did find a custom policy sample here https://github.com/azure-ad-b2c/samples/tree/master/policies/delete-my-account, but that solution brings far too many unnecessary dependencies along with it - which I have no interest in reviewing and maintaining. Only local accounts and phone sign-up/sign-in need to be considered - and merely extend that with some possibility to delete an account without having direct access to the Azure portal. No existing flows/policies are in need of modification.

Answer 1

Hello @Veli-Jussi Raitila , in order to delete an Azure AD B2C local consumer account, you can leverage the Microsoft Graph API and/or one of its SDK. Take a look to the Delete a user operation. Ensure the sign-up user journey outputs the User's Object ID claim so that you can pass it to the MS Graph call. Also, you will need to Register a Microsoft Graph application, expose the required permissions and, optionally and as replacement for tenant-wide consent, provide fine-grained consent.

For more information about what can be done trough Microsoft Graph, take a look to Manage Azure AD B2C with Microsoft Graph.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.