Permission Request in Custom Policy for Azure B2C

Question

I am building a custom policy where clients can sign in with their company IDP.

The steps (in short) are as follow:

• Client user provide their work email address
• Their domain is parsed and used to direct them to their tenant to sign in (each client's IDP is configured in the custom policy)
• They sign in with their work account
• JWT sent to application if sign in is successful

The problem is that when the user that signs in have not given permission to scopes "openid and offline_access", it will through the following error.

`AADB2C90273: An invalid response was received : 'Error: access_denied,Error Description: AADSTS650054: The application 'https://

Answer 1

Hi @Pierre , Thanks for reaching out.

AADB2C90273 is very generic error which means "An invalid response was received: '{0}'and AADSTS650054 means the application asked for permissions to access a resource that has been removed or is no longer available.

Could you please confirm while registering the application, did you check the below checkbox?

Also, could you please confirm what are the permissions you are passing in scope while sending the request? Thanks, Shweta