B2C Multi tenant Azure AD - Add email to the token

Question

Hello Team

I am using custom policies to enable Multi-tenant AD on a B2C tenant following this flow.

I am getting this [kindly see the picture below].

However, I want the custom policy to fetch the email or upn attribute from user's Azure AD and add it as "emails" in the token. The idea is to provide this token to the application [Dynamics 365] so that it will recognize the email account and thus map the signed user account with corresponding Dynamics 365 contacts. Thanks for your effort.

Answer 1

I found the answer.

It seems I need to add this to trustframeworkextension.xml under ClaimProviders -->ClaimProvider [for e.g. AAD] - TechnicaProfiles -OutputCliams element

<OutputClaim ClaimTypeReferenceId="email" PartnerClaimType="email" />