No User email claim in access token

Question

I am using azure Entra external for my b2c app and we have sign in with google set up done and I don't get the user email in the access token scopes earlier I got it as the preffered_username now I don't get it .

Answer 1

Hello @mohammed abdul salaam

The missing email or preferred_username in the access token is a normal occurrence with Azure Entra External ID (B2C). User profile claims are no longer included by default in access tokens, which are now only intended for API authorization. preferred_username is not automatically mapped or issued when utilizing Google sign-in.

To obtain the email:

• For frontend apps, use the ID token; otherwise,
• If your API calls for it, specifically include email as a optional claim in the app's Token configuration, or
• For backend scenarios, retrieve it via Microsoft Graph (/me).

If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know.