This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 78%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVM%3C/text%3E%3C/svg%3E)
When a user is invited to join the b2c tenant with an invitation link if the user tries to access that link it says that the link is expired as the expiry time is 24 hours.
Upon expiry user sees Microsoft Defined error page where it does not state that the link/ token has expired.
So, wanted to either redirect to custom error page or display a custom error page with proper messages.
How to show the custom error page in this scenario?
The eg. invitation link is here.
Hello @Vaibhav More , the included link displays this:
AADB2C90017: The client assertion provided in the request is invalid: 'client_secret' was used as the verification key
Can you explain with more detail how the user is created and the invitation sent?
anonymous user-msft ,
PFB code used to generate the invite link: JWT token has a validity of 1 day. Other variables are specific to Azure AD Tenant.
var url = $"https://{domainName}.b2clogin.com/{issuer}/{invitationPolicy}/oauth2/v2.0/authorize?client_id={clientId}" +
$"&login_hint={inviteRequest.InviteEmail}&response_mode=fragment&nonce=defaultNonce" +
$"&redirect_uri={redirectUrl}&scope=openid&response_type=id_token" +
$"&client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer&client_assertion={jwt}";
What is PFB? Also, you're requesting an id token using a client assertion. This is not a requirement and I'm not aware if its supported. I still not clear about how the link is generated. Are you inviting a B2B Azure AD user or a already created B2C user?
PFB = Please find below.
Any user having Azure/Gmail or any valid email can be invited to join our B2C tenant using a similar kind of link shown above.
Here client_assertion_type is making use JWT Token to validate the email and expiry.
Upon expiration (After 24 Hours), it shows the default error page.
Hi, do you still require assistance? If not, please mark the answer as verified.
Thank you,
James
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 11%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDL%3C/text%3E%3C/svg%3E)
Hi @James Hamil this issue is still there. Upon expiry user sees Microsoft Defined error page where it does not state that the link/ token has expired.
So, I wanted to either redirect to a custom error page or display a custom error page with proper messages.
Ok got it. Well that looks like a implicit flow request which should not contain nor a client secret or assertion. Also client assertion is no longer supported by B2C.