Hi @Aashutosh Aryal Thanks for reaching out to Microsoft Q&A! Could you please confirm if the user without the family_name and given_name claims have both attributes filled on EntraID? Also, could you also confirm if you are using the same request to get an access token on both cases following this document? https://learn.microsoft.com/en-us/entra/identity-platform/userinfo#permissions Thanks, Fabio

Decrypting an ID token requires me to fetch the signing certificates from microsoft then decrypting it, and found that the userinfo endpoint was quicker and simpler for my use case. As for the answer, it turns out that I have to use the common tenant for the authorization url for it to work with both my organizational and external personal microsoft accounts.

Difference in amount of information provided by OCID userinfo.

Aashutosh Aryal 40

User's image

JamesTran-MSFT 36,596 Reputation points Microsoft Employee

2023-11-14T20:16:16.46+00:00

@Aashutosh Aryal

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

2 answers

Fabio Andrade 1,580 Reputation points Microsoft Employee

2023-11-03T23:02:10.84+00:00

Hi @Aashutosh Aryal

Thanks for reaching out to Microsoft Q&A!

Could you please confirm if the user without the family_name and given_name claims have both attributes filled on EntraID?

Also, could you also confirm if you are using the same request to get an access token on both cases following this document?

https://learn.microsoft.com/en-us/entra/identity-platform/userinfo#permissions

Thanks,

Fabio
Please sign in to rate this answer.
Aashutosh Aryal 40 Reputation points

2023-11-06T02:00:12.6633333+00:00

I can confirm that both of them are using the same request (access tokens for both are obtained from the same frontend). Also, when decoding the access token on jwt.ms, the access tokens reveal given name and family name for both users.

However, one of the users is from my organization account while the other is an external user with a normal outlook account. I have set the app to: "Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)".

Is this also the reason for: https://learn.microsoft.com/en-us/answers/questions/1411714/fetching-user-data-from-access-token-received-from

Thank you.

Fabio Andrade 1,580 Reputation points Microsoft Employee

2023-11-10T19:45:20.69+00:00

Hi Aashutosh Aryal,

There are differences in the response from the user_info endpoint between guest users and member users in my lab environment too. The reason for this is not clear, but I'd like to advise you to use the id_token (NOT the access_token) for obtaining user information instead of user_info endpoint.

https://learn.microsoft.com/en-us/entra/identity-platform/userinfo#consider-using-an-id-token-instead

That being said, do you have any particular reason to use the UserInfo endpoint instead of the ID Token that I might be missing in your case?

Thanks,

Fabio
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Aashutosh Aryal 40 Reputation points

2023-11-17T02:58:19.3833333+00:00

Decrypting an ID token requires me to fetch the signing certificates from microsoft then decrypting it, and found that the userinfo endpoint was quicker and simpler for my use case.

As for the answer, it turns out that I have to use the common tenant for the authorization url for it to work with both my organizational and external personal microsoft accounts.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Difference in amount of information provided by OCID userinfo.

2 answers

Your answer