Azure B2C Custom sign in/sign up policy - Sign In Not working

Question

Azure B2C Custom sign in/sign up policy - Sign In Not working

Tommy Waite 30

I'm having some trouble with the B2C custom sign in/sign up policy where I can sign up the user fine and I see this reflected in the tenant and DB. But when trying to sign in I get "The username or password provided in the request are invalid". I know the password i'm entering is correct and even resetting the password manually on the user from the portal does not work. Any ideas on what I need to do here to get this working would be much appreciated!

User's image

I have followed the samples at https://github.com/azure-ad-b2c/samples/tree/master/policies/custom-email-verifcation-displaycontrol.

I want to use custom email verification using MailJet and this all works fine. But the sign in is currently broken and i'm unsure why as I haven't changed anything.

I have also updated both of these input claims in my TrustFrameworkExtensions.xml file to the ProxyIdentityExperienceFramework App ID as mentioned in the comment. User's image

Tommy Waite 30 Reputation points

2025-04-28T22:42:56.5+00:00

Looking at the following documentation: https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows?pivots=b2c-custom-policy

I can see it mentions the registered applications must be set to Accounts in this organizational directory only

Currently mine is set to Accounts in any identity provider or organizational directory (for authenticating users with user flows). I think this is the issue and will give this a try.
Tommy Waite 30 Reputation points

2025-04-29T16:19:13.5333333+00:00

This doesn't seem to be the right approach as now when I try to run the custom policies, the registered applications do not appear. Any help on this would be much appreciated!
Tommy Waite 30 Reputation points

2025-04-29T19:25:24.64+00:00

Fix is to auto generate the custom policy files via https://b2ciefsetupapp.azurewebsites.net/
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-04-30T12:11:45.3733333+00:00

Hello @Tommy Waite
I Hope the issue got resolved by auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/.Do let us know if you have any Queries. We are happy to assist further.
Tommy 0 Reputation points

2025-04-30T17:40:14.8566667+00:00

I'm having some trouble getting the bearer access token working for password reset and profile edit custom policies.

Is there any documentation you can point me towards to resolve this? It seems to work fine for SignIn/SignUp using the auto generated files I got without any changes required. But I haven't managed to get this working for the password reset and profile edit custom policies. Any help would be much appreciated! Cheers Harshitha Eligeti!

This is my SIgnUpOrSignIn policy:

This is my PasswordReset policy:
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-02T10:39:46.4033333+00:00

Hello @Tommy
To resolve issues with obtaining bearer access tokens for password reset and profile edit custom policies in Azure AD B2C, you may want to refer to the documentation on configuring custom policies. Can you please refer these documents:
https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-password-reset-policy?pivots=b2c-custom-policy#password-reset-policy-legacy
https://learn.microsoft.com/en-us/azure/active-directory-b2c/force-password-reset?pivots=b2c-custom-policy#configure-your-custom-policy

Do Let me know if you have any quires. We are happy to assist further.
Tommy 0 Reputation points

2025-05-02T18:03:44.39+00:00

I couldn't see anything obvious in the docs.

I'm getting this in my .NET application:

Access token retrieval is working fine for SignIn/SignUp now using the auto files from https://b2ciefsetupapp.azurewebsites.net/. And the .NET C# code above in the screenshot.

But I can't work out why the ProfileEdit & PasswordReset custom policies are not working. These were working fine previously when using user flows.

I'm tested both policies using https://jwt.ms/ and the token is returned correctly for the scope I pass as a parameter in the code above. The only difference is when I run the Identity Experience Framework custom policy via the Azure portal, it forces me to sign in prior to sending me to the ProfileEdit / PasswordReset pages. Whereas in my web application, the user has already signed in at this point, then is taken straight to the page without requiring sign in again.

Any help on this would be much appreciated! I'm at a bit of a loss at the minute with it and documentation isn't 100% clear what is required.
Tommy 0 Reputation points

2025-05-03T18:04:41.85+00:00

Related issue https://learn.microsoft.com/en-us/answers/questions/2262771/azure-b2c-bearer-accesstoken-not-being-generated-w
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-05T20:19:44.8366667+00:00

Hello @Tommy
I Understand that ProfileEdit & PasswordReset custom policies are not working. These were working fine previously when using user flows. You are having an issue with custom policies to reset the password. I would like to provide you the configuration information in detail which helps in you rechecking the policies.

For Additional information please refer these links: https://learn.microsoft.com/en-us/answers/questions/2168348/unable-to-reset-password-through-custom-policy
https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-profile-editing-policy?pivots=b2c-custom-policy

Do Let me know if you have any quires. We are happy to assist further.
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-06T18:25:16.5066667+00:00

Hello @Tommy
Following up to see if the suggestion was helpful. And, if you have any further query do let us know.
Tommy 0 Reputation points

2025-05-06T18:27:52.5966667+00:00

Hi there,

Unfortunately, I didn't manage to see anything if the suggested documentation that has resolved my issue.

I think this question should be closed now, this has moved over to https://learn.microsoft.com/en-us/answers/questions/2262771/azure-b2c-bearer-accesstoken-not-being-generated-w. If you do have any suggestions or help you can give over there that would be much appreciated, I'm a little bit stuck with it at the moment and could use any help!

Cheers, Tom
Tommy 0 Reputation points

2025-05-06T18:29:03.4633333+00:00

Main issue has been resolved. Configuration must have been wrong in my registered applications. Auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/ was a much simpler and easier solution. These can then be edited to your needs.

However there is now an issue getting the bearer Access Token on the ProfileEdit & PasswordReset custom policies using ITokenAcquisition in .NET C# GetAccessTokenForUserAsync. This can be found at: https://learn.microsoft.com/en-us/answers/questions/2262771/azure-b2c-bearer-accesstoken-not-being-generated-w
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-06T18:46:39.9633333+00:00

Hello @Tommy
Hope the issue got resolved by auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/.I have sent you a private message you can check the private message and get back to me. To see the private message option please login with Tommy Waite in the Q&A platform as because you have raised this thread using this account.So private option will be visible to this account not with Tommy.

Do let us know if you have any Queries. We are happy to assist further.

Accepted answer

0 additional answers

Your answer

Tommy Waite 30 Reputation points

2025-04-28T22:42:56.5+00:00

Looking at the following documentation: https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows?pivots=b2c-custom-policy

I can see it mentions the registered applications must be set to Accounts in this organizational directory only

Currently mine is set to Accounts in any identity provider or organizational directory (for authenticating users with user flows). I think this is the issue and will give this a try.
Tommy Waite 30 Reputation points

2025-04-29T16:19:13.5333333+00:00

This doesn't seem to be the right approach as now when I try to run the custom policies, the registered applications do not appear. Any help on this would be much appreciated!
Tommy Waite 30 Reputation points

2025-04-29T19:25:24.64+00:00

Fix is to auto generate the custom policy files via https://b2ciefsetupapp.azurewebsites.net/
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-04-30T12:11:45.3733333+00:00

Hello @Tommy Waite
I Hope the issue got resolved by auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/.Do let us know if you have any Queries. We are happy to assist further.
Tommy 0 Reputation points

2025-04-30T17:40:14.8566667+00:00

I'm having some trouble getting the bearer access token working for password reset and profile edit custom policies.

Is there any documentation you can point me towards to resolve this? It seems to work fine for SignIn/SignUp using the auto generated files I got without any changes required. But I haven't managed to get this working for the password reset and profile edit custom policies. Any help would be much appreciated! Cheers Harshitha Eligeti!

This is my SIgnUpOrSignIn policy:

This is my PasswordReset policy:
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-02T10:39:46.4033333+00:00

Hello @Tommy
To resolve issues with obtaining bearer access tokens for password reset and profile edit custom policies in Azure AD B2C, you may want to refer to the documentation on configuring custom policies. Can you please refer these documents:
https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-password-reset-policy?pivots=b2c-custom-policy#password-reset-policy-legacy
https://learn.microsoft.com/en-us/azure/active-directory-b2c/force-password-reset?pivots=b2c-custom-policy#configure-your-custom-policy

Do Let me know if you have any quires. We are happy to assist further.
Tommy 0 Reputation points

2025-05-02T18:03:44.39+00:00

I couldn't see anything obvious in the docs.

I'm getting this in my .NET application:

Access token retrieval is working fine for SignIn/SignUp now using the auto files from https://b2ciefsetupapp.azurewebsites.net/. And the .NET C# code above in the screenshot.

But I can't work out why the ProfileEdit & PasswordReset custom policies are not working. These were working fine previously when using user flows.

I'm tested both policies using https://jwt.ms/ and the token is returned correctly for the scope I pass as a parameter in the code above. The only difference is when I run the Identity Experience Framework custom policy via the Azure portal, it forces me to sign in prior to sending me to the ProfileEdit / PasswordReset pages. Whereas in my web application, the user has already signed in at this point, then is taken straight to the page without requiring sign in again.

Any help on this would be much appreciated! I'm at a bit of a loss at the minute with it and documentation isn't 100% clear what is required.
Tommy 0 Reputation points

2025-05-03T18:04:41.85+00:00

Related issue https://learn.microsoft.com/en-us/answers/questions/2262771/azure-b2c-bearer-accesstoken-not-being-generated-w
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-05T20:19:44.8366667+00:00

Hello @Tommy
I Understand that ProfileEdit & PasswordReset custom policies are not working. These were working fine previously when using user flows. You are having an issue with custom policies to reset the password. I would like to provide you the configuration information in detail which helps in you rechecking the policies.

For Additional information please refer these links: https://learn.microsoft.com/en-us/answers/questions/2168348/unable-to-reset-password-through-custom-policy
https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-profile-editing-policy?pivots=b2c-custom-policy

Do Let me know if you have any quires. We are happy to assist further.
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-06T18:25:16.5066667+00:00

Hello @Tommy
Following up to see if the suggestion was helpful. And, if you have any further query do let us know.
Tommy 0 Reputation points

2025-05-06T18:27:52.5966667+00:00

Hi there,

Unfortunately, I didn't manage to see anything if the suggested documentation that has resolved my issue.

I think this question should be closed now, this has moved over to https://learn.microsoft.com/en-us/answers/questions/2262771/azure-b2c-bearer-accesstoken-not-being-generated-w. If you do have any suggestions or help you can give over there that would be much appreciated, I'm a little bit stuck with it at the moment and could use any help!

Cheers, Tom
Tommy 0 Reputation points

2025-05-06T18:29:03.4633333+00:00

Main issue has been resolved. Configuration must have been wrong in my registered applications. Auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/ was a much simpler and easier solution. These can then be edited to your needs.

However there is now an issue getting the bearer Access Token on the ProfileEdit & PasswordReset custom policies using ITokenAcquisition in .NET C# GetAccessTokenForUserAsync. This can be found at: https://learn.microsoft.com/en-us/answers/questions/2262771/azure-b2c-bearer-accesstoken-not-being-generated-w
Harshitha Eligeti 4,140 Reputation points Microsoft External Staff Moderator

2025-05-06T18:46:39.9633333+00:00

Hello @Tommy
Hope the issue got resolved by auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/.I have sent you a private message you can check the private message and get back to me. To see the private message option please login with Tommy Waite in the Q&A platform as because you have raised this thread using this account.So private option will be visible to this account not with Tommy.

Do let us know if you have any Queries. We are happy to assist further.

Answer 1

Hello @Tommy Waite
I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: Azure B2C Custom sign in/sign up policy - Sign in Not working.

Solution: By auto generating the custom policy files via https://b2ciefsetupapp.azurewebsites.net/ the issue got resolved.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Share via

Azure B2C Custom sign in/sign up policy - Sign In Not working

0 additional answers

Your answer