Azure AD B2C using access token produced by password reset policy

Vasilii Aleksandrov 16

I have a custom password reset policy in Azure B2C.
Q1: is that possible to use access token emitted by the policy in my FE application (MSAL.js v2)?
Q2: is that possible to include email address as a claim of the token produced by my policy?

James Hamil 24,666 Reputation points Microsoft Employee

2020-11-26T00:18:02.25+00:00

Hi, do you still require assistance? If not, please mark the answer as verified.

Thank you,
James

1 answer

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points

2020-11-10T16:35:40.673+00:00
Hello @Vasilii Aleksandrov ,

Yes

Yes as emails claim in user flows or as any other custom claim using custom policies.

Let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.
Please sign in to rate this answer.
Vasilii Aleksandrov 16 Reputation points

2020-11-10T17:09:14.79+00:00

anonymous user-msft thank you for your answer.
So far I couldn't get an email in my password reset policy even though I put an output claim like this: <OutputClaim ClaimTypeReferenceId="email" />
The email was not a part of my token. Do you have any ideas why is that?
I used this example: https://github.com/azure-ad-b2c/samples/tree/master/policies/pwd-reset-email-exists/policy
I would like to implement the following flow: after successful execution of my reset password policy I wanna let the user sign in automatically. Therefore my token claims should contain an email address (it's a already a part of my BE logic)
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure AD B2C using access token produced by password reset policy

1 answer

Your answer