AD B2C TOTP Custom Policy Keep Social account signed-in
The application I am working on has a sign-in custom policy and afterwards the user has access to other custom policies.
Issue: If the user signs-in with a social account, like google, the sign-in in the next custom policy is prompted instead of utilizing the already existing session. This issue does not happen when the user signs-in with a local account.
The following is one of the custom policies that the user has access to, after being signed-in. TOTP Custom Policy: https://github.com/azure-ad-b2c/samples/tree/master/policies/totp
This is my userJourney: https://pastebin.com/GVMk5nVP
In order to enable TOTP for any social login I added the following claimExchange:
<ClaimsExchanges>
<ClaimsExchange Id="AADUserReadUsingAlternativeSecurityId" TechnicalProfileReferenceId="AAD-UserReadUsingAlternativeSecurityId" />
</ClaimsExchanges>
AAD-UserReadUsingAlternativeSecurityId Tech Profile: https://pastebin.com/UQ3nPWAJ
I have read from a Microsoft forum, someone fixed this issue by adding objectId to a specific tech profile, but didn't go into much detail on how it was fixed (also the above tech profile alrady seems to have the objectId).