Conditional Access Not Triggering in Azure AD B2C

Ray Garg 10 Reputation points
2025-06-06T02:20:23.8666667+00:00

Hi ,

I’ve successfully implemented all my main Azure AD B2C flows for user migration— including custom password reset, MFA with authenticator app (via TOTP), user migration with just-in-time logic, and sign-in / sign-up orchestration. Most core flows are working well.

However, I’ve run into issues with Conditional Access (CA) not triggering as expected.

What I’ve Done So Far

  • I have incorporated Microsoft’s Azure AD B2C Conditional Access GitHub repo exactly as described.
  • I understood the README thoroughly and copied all the code (technical profiles, claim types, claims transformations, etc) from TrustFrameworkExtensions_ConditionalAccess.xmlinto my TrustFrameworkExtensions.xml (The one for user migration).
  • I tested this in my flow by launching sign-in from Tor browser to simulate a risky login scenario — expecting to be blocked or prompted for MFA — but the sign-in proceeded normally without blocking the sign in.
  • NOTE: The way my current logic is set up, i believe MFA will always be prompted to the user on sign in, im a bit uncertain on how to integrate the conditional access signals to make sure it only gets enforced on risk signals. Setting up Conditional Access for user flows directly through the azure portal is seamless. however when it comes to inetgrating this in custom policies, im unaware of the approach to do so, and all guidance would go a long way here. If its possible to explain how the ConditionalAccesssProtocolProvider is working in the custom policy (the azure provided one, this would go a long way). Also, any explanations of how the logic is working like the specfic profiles of the conditional access logic is always appreciated, i do understand it, but i may always be missing something. ive seen a few mcirosoft documentations, where we can actually write code for condeitional access as well. im not sure if this is standard for azure ad b2c, but if it is, i would very much like to know more details about it.
      Thanks for all the help!!  
      
      
      Ray
    
Developer technologies | C#
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.