Azure B2C domain_hint multiple claims providers not working

Gaurang Patel 96 Reputation points
2020-08-02T02:56:15.88+00:00

I have configured a custom policy with three different claims providers and each of them have set "Domain" property to indicate domain_hint. However, domain_hint only works for the first two claims providers.

For example: Claims providers configured as below

<ClaimsProviders>
<ClaimsProvider>
<Domain>RossTeam</Domain>
.....................
</ClaimsProvider>
<ClaimsProvider>
<Domain>RLBUK</Domain>
.....................
</ClaimsProvider>
<ClaimsProvider>
<Domain>RLBNZ</Domain>
.....................
</ClaimsProvider>
</ClaimsProviders>

In the above configuration domain_hint works for both RossTeam and RLBUK, but not working for RLBNZ.

However, if I switch the order of claims provider RLBUK and RLBNZ then it is not working for RLBUK. Looks like it is always not working for last claim provider in the claim providers list.

14859-image.png

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

Accepted answer
  1. Gaurang Patel 96 Reputation points
    2020-08-02T03:44:02.657+00:00

    Further information. I managed to resolve this issue by updating <DisplayName> for all three policy to have some unique description. Previously both RLBUK and RLBNZ policy has "Login with your work account" set for <DisplayName>.

    Maybe each ClaimsProvider need unique display name as well along with unique domain name.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.