How can I get Email as a claim in Azure AD B2C custom policy with SAML2.0 authentication?

Question

I am using Azure AD B2C custom policy to connect to SAML2.0 IDP for authentication but I am not receiving Email as an output claim in response. I have tried the solutions mentioned in this Stack Overflow post, but I am still not getting the desired output. Could you please guide me on how to get Email as output in my policy?

Answer 1

Hi @Aditya Gour (NAV India) , if the answers you referenced aren't working for you, please try the following and let me know if it helps you:

1. In your SAML2.0 identity provider, add the Email attribute to the SAML2.0 token that is sent to Azure AD B2C.
2. In your custom policy, add the Email claim to the list of output claims in the TechnicalProfile that is responsible for receiving the SAML2.0 token.

The TechnicalProfile for example:

<TechnicalProfile Id="Saml2AssertionConsumer">
  <OutputClaims>
    <OutputClaim ClaimTypeReferenceId="email" />
    <!-- Other output claims -->
  </OutputClaims>
  <!-- Other technical profile settings -->
</TechnicalProfile>

Make sure that the ClaimTypeReferenceId matches the name of the Email claim that is sent by your SAML2.0 identity provider.

Please let me know if you have any questions and I can help you further.

If this doesn't work please post your custom policy so I can review it.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James