Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
RBAC in web app registered under Azure B2C Tenant
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
I have a web app and web api (both in .net core) registered under Azure B2C Tenant. I have configured user flow for authenticating the users of web app using gmail as the identity provider. I have created app roles in the manifest of web app and assigned to users of this app. How can I get these app roles assigned to users once they log into the web app so that I can include it in the access token for further authorization?
Azure
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Anonymous
2022-05-04T19:06:54.807+00:00 Hi @Anonymous , thanks for the question. To understand correctly, right now if a new user signs up they don't have a role? And you want to automatically assign a role to users on sign up? Have you reviewed this document? Please let me know what questions or clarifications you have and I can help you further.
Best,
James -
Anonymous
2022-05-05T08:05:25.443+00:00 Thanks @James Hamil , for your quick response.
Once a user signs up, I assign him role manually. But the issue is once the same user logs in to the web application which is registered under Azure AD B2C tenant, how do I retrieve the role assigned to him for including in the JWT token to be used for further authorization? The token generated by Azure AD B2C after successful log in doesn't include the role assigned to him. How do I retrieve this role for including in the JWT token?
I just went through youtube video showing how to add role to tokens in Azure AD B2C. Please see the below linkhttps://www.youtube.com/watch?v=C9qN6QqnxQ8&ab_channel=SSWTV%7CVideosfordevelopers%2Cbydevelopers
Is it the only and recommended way of doing this? Please advise.
-
Anonymous
2022-05-09T23:35:06.79+00:00 Hi @Anonymous , sorry for the delay in response. have you looked into configuring tokens? You can edit what is returned with custom policies.
Sign in to comment
Sign in to answer