How to skip OrchestrationStep related to MFA (ClaimsExchange) if current session is already active

Bhusari, Milind 0 Reputation points
2024-05-18T01:25:04.11+00:00

We have a CombinedSignInAndSignup step that displays a login prompt if the session is not active. This step is followed by a ClaimsExchange, which handles phone SMS or call authentication. When there is an active session (whether ‘Keep me signed in’ is on or off), the login screen is not shown, and the user can proceed directly to the next step. However, we also want to skip the ClaimsExchange step. Could you please guide us on achieving this, including the necessary precondition for the ClaimsExchange step?

We have a CombinedSignInAndSignup step that displays a login prompt if the session is not active. This step is followed by a ClaimsExchange, which handles phone SMS or call authentication. When there is an active session (whether ‘Keep me signed in’ is on or off), the login screen is not shown, and the user can proceed directly to the next step. However, we also want to skip the ClaimsExchange step. Could you please guide us on how to achieve this, including the necessary precondition for the ClaimsExchange step?



<OrchestrationStep Order="1" Type="CombinedSignInAndSignUp" ContentDefinitionReferenceId="api.signuporsigninwithpasswordreset">
            <ClaimsProviderSelections>
            <ClaimsProviderSelection ValidationClaimsExchangeId="LocalAccountSigninEmailExchange" />
            <ClaimsProviderSelection TargetClaimsExchangeId="ForgotPasswordExchange" />
            </ClaimsProviderSelections>
            <ClaimsExchanges>
            <ClaimsExchange Id="LocalAccountSigninEmailExchange" TechnicalProfileReferenceId="SelfAsserted-LocalAccountSignin-Email" />
          </ClaimsExchanges>
</OrchestrationStep>

<OrchestrationStep Order="2" Type="ClaimsExchange">
  <Preconditions>
 
  </Preconditions>
  <!-- Other configuration for ClaimsExchange goes here -->
</OrchestrationStep>

....
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,451 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.