Azure AD B2C: Missing session after sign-up flow (Custom policies)

Christoph Huber 126 Reputation points
2022-09-05T09:32:22.903+00:00

We have a custom sign-in/sign-up flow. The sign-up flow is divided into two separate steps like in the official custom policy example. After the sign-up flow, the client gets a valid ID token. But when Azure is asked for authentication again, I get the login page again. It seems that the session is handled differently than after a standard login flow. What might be the reason for this?

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,719 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AmanpreetSingh-MSFT 56,461 Reputation points
    2022-09-06T07:12:08.023+00:00

    Hi @Christoph Huber • Thank you for reaching out.

    Please check if your authentication request URL includes the OAuth prompt parameter. This behavior is expected if you see prompt=login in the authentication request. If this parameter is included in the request, try to remove it to avoid the authentication prompt at each sign-in attempt.

    Below is the list of all the possible values for the prompt parameter:

    1. prompt=login forces the user to enter their credentials on that request, negating single-sign on.
    2. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error.
    3. prompt=consent triggers the OAuth consent dialog after the user signs in, asking the user to grant permissions to the app.
    4. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.