Azure B2C - Phone number Sign up/ Sign In

Question

Azure B2C - Phone number Sign up/ Sign In

Harjani, Ashish 191

Hi ,

So we have the Email Address Sign UP option where we can provide email address and password to sign in to user flow.
Similarly, we have the Phone number Sign UP option , where we give phone number and MSFT sends the OTP to that number and that is used to sign in to user flow.

We have a requirement , where we want to have Phone Number as our Sign UP option -but we want to get away from sending OTP , and want users should be able to set their own password just like in case of email Sign UP.

So, is it possible to have Phone Number Sign UP along with self create password for Users ? So they are not sent OTP every time.

Answer 1

Alfredo Revilla (MSFT) 17,016 Microsoft Employee

Hello, the easiest is to modify the starter pack LocalAccounts template. Rename all matches for email with phone (Do it case sensitive) and ensure the following elements into your SelfAsserted-LocalAccountSignin-Phone technical profile:

   <Metadata>  
       <Item Key="setting.operatingMode">Username</Item>  
   </Metadata>

And in your AAD-UserWriteUsingLogonPhone:

   <PersistedClaims>  
       <PersistedClaim ClaimTypeReferenceId="phoneNumber" PartnerClaimType="signInNames.phoneNumber" />  
   </PersistedClaims>

Alternatively, you might add validation technical profile that targets a REST API (developed by you) that will call MS Graph to add the phone as strong verification method (MFA).

Harjani, Ashish 191 Reputation points

2020-12-15T23:34:15.173+00:00

HI anonymous user-msft and Team,

I think you meant "Rename all matches for email with phone" and not "Rename all matches for phone with email" ?

Also, how would the Sign UP really work in that case conceptually ? Will MSFT send the initial verification code to the Phone Number instead of Email address automatically if we follow the first approach specified?

I haven't tried this yet but we were thinking if the Phone Sign UP User Flows (phone-authentication) can be modified such that they don't send OTP but rather present Create Password screen somehow ?
Alfredo Revilla (MSFT) 17,016 Reputation points Microsoft Employee

2020-12-16T20:30:19.26+00:00

My bad, I've corrected my statement. No it would not send the verification code. It can be done, let me take a look and let you know of possible changes.
Alfredo Revilla (MSFT) 17,016 Reputation points Microsoft Employee

2020-12-17T19:05:24.31+00:00

I took a look to the refered Phone Sign UP User Flow (custom policy actually). The changes required will be more to basically match my first suggestion. Please try it first and if there's something lacking or in excess let me know.

Azure B2C - Phone number Sign up/ Sign In

1 answer

Activity