AD B2C custom policy with TFA using TOPT

Chetan Kumar 26 Reputation points
2021-04-05T04:07:14.387+00:00

Hi,

I am setting up B2C custom policies with TFA using TOTP.

I have followed the git gub samples.

  • added "allow script execution, updated DataURI values, update the REST end-points for Generate, Validate etc.
  • I have deployed my REST API on my back-end server on third-party cloud.

The orchestration steps works perfect up to Step 7 ( <OrchestrationStep Order="7" Type="ClaimsExchange"> )

The orchestration order 8 failed with the error error_description=AADB2C90047 The resource "http://myserver.aikaan.io/selfasserted-appfactor-registration.html" contains script errors preventing it from being loaded

I have made sure there is no CORS errors, my nginx server config include " add_header Access-Control-Allow-Origin *; "

I do not see any request in access_log of my nginx server.

What am I missing and how do I debug further.

Special attn: @AmanpreetSingh-MSFT

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,633 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmanpreetSingh-MSFT 56,301 Reputation points
    2021-04-05T09:41:37.463+00:00

    Hi @Chetan Kumar · Thank you for reaching out.

    Along with Access-Control-Allow-Origin, try adding below headers 

     Access-Control-Allow-Credentials  
 Access-Control-Allow-Methods  
 Access-Control-Allow-Headers

    with the values mentioned under Configure CORS

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.