Unable to get custom user properties (user_id) from Auth0 in Azure AD B2C claims

Gangarde, Sachin 20

Hi,

We have added Auth0 as IDP in Azure AD B2C using custom policies like below:

<TechnicalProfile Id="Auth0-OID">
    <DisplayName>Auth0</DisplayName>
    <Protocol Name="OpenIdConnect" />
    <Metadata>
        <Item Key="METADATA">https://*******-dev.auth0.com/.well-known/openid-configuration</Item>
        <Item Key="authorization_endpoint">https://*********-dev.auth0.com/authorize</Item>
        <Item Key="response_types">code</Item>
        <Item Key="response_mode">form_post</Item>
        <Item Key="scope">openid email profile</Item>
        <Item Key="HttpBinding">POST</Item>
        <Item Key="UsePolicyInRedirecturi">0</Item>
        <Item Key="client_id">JRC************2I2PTt</Item>
    </Metadata>
    <CryptographicKeys>
        <Key Id="client_secret" StorageReferenceId="B2C_1A_Auth0DevTest1App" />
    </CryptographicKeys>
    <InputClaims>        
        <InputClaim ClaimTypeReferenceId="connection" />
    </InputClaims>
    <OutputClaims>
        <OutputClaim ClaimTypeReferenceId="objectId" PartnerClaimType="aud" />
        <OutputClaim ClaimTypeReferenceId="user_id" PartnerClaimType="user_id" />
        <OutputClaim ClaimTypeReferenceId="email" PartnerClaimType="email" />
        <OutputClaim ClaimTypeReferenceId="givenName" PartnerClaimType="given_name" />
        <OutputClaim ClaimTypeReferenceId="surname" PartnerClaimType="family_name" />
        <OutputClaim ClaimTypeReferenceId="displayName" PartnerClaimType="name" />
        <OutputClaim ClaimTypeReferenceId="identityProvider" DefaultValue="Auth0.com" AlwaysUseDefaultValue="true" />
        <OutputClaim ClaimTypeReferenceId="authenticationSource" DefaultValue="socialIdpAuthentication" />
        <OutputClaim ClaimTypeReferenceId="socialIdpUserId" PartnerClaimType="aud" />
        <OutputClaim ClaimTypeReferenceId="accountEnabled" DefaultValue="True" AlwaysUseDefaultValue="true"/>
    </OutputClaims>
    <OutputClaimsTransformations>
        <OutputClaimsTransformation ReferenceId="CreateRandomUPNUserName" />
        <OutputClaimsTransformation ReferenceId="CreateUserPrincipalName" />
        <OutputClaimsTransformation ReferenceId="CreateAlternativeSecurityId" />
        <OutputClaimsTransformation ReferenceId="CreateSubjectClaimFromAlternativeSecurityId" />
    </OutputClaimsTransformations>
    <UseTechnicalProfileForSessionManagement ReferenceId="SM-SocialLogin" />
</TechnicalProfile>

We are getting all the properties in the claims except user_id (which is Auth0 specific).

Auth0 user profiles looks like below and we want get "user_id" from user profile in the claims of Azure AD B2C.

enter image description here

We have added user_id defined as claimtype and also added in outputclaims in the user journey; but, all the time we are getting empty value for user_id claim.

What else needs to be done in order to get an IDP specific values in the claims?

Thank you.

Shweta Mathur 27,711 Reputation points Microsoft Employee

2024-03-20T09:59:07.0333333+00:00
Hi @Gangarde, Sachin ,

Thanks for reaching out.

There is no claim named user_id present in the token. You can verify by decoding the token using jwt.ms. You can utilize either the sub or oid claim to map to the user_id, which contains the unique identifier for the application user.

For instance, you can define the output claim as follows:

<OutputClaim ClaimTypeReferenceId="user_Id" PartnerClaimType="oid"/>

This mapping will associate the oid claim with the user_Id claim in your Azure AD B2C configuration.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.
Gangarde, Sachin 20 Reputation points

2024-03-20T13:18:52.37+00:00

@Shweta Mathur There is "user_id" in the original token which comes from Auth0 to Azure Ad B2C in the callback request. But, it is getting missed in the token generated by Azure Ad B2C based on an Auth0 token. You can check the image which shows the decrypted token from Autho to Azure AD B2C.

So, my question is how to preserve those values/properties coming from other IDP to Azure AD B2C?
Gangarde, Sachin 20 Reputation points

2024-03-22T17:50:53.0866667+00:00

@Shweta Mathur Any thoughts on this, please?