3,309 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags
Does Connected Organization force OTP
I have added connected organizations to our Azure AD in an attempt to create an access package for a SharePoint Site. Many of the domains for those connected organizations do not use or are not linked to an active directory, and are showing OTP as the…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Other
B2C Secure REST API with OAuth 2.0 Bearer Token
I am calling a REST API with a OAuth 2.0 bearer token from my self-asserted-login technical profile. Here is the link of the guide that I followed. https://learn.microsoft.com/en-us/azure/active-directory-b2c/secure-rest-api I have placed the calls…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Server-side Blazor app unable to use multiple AD B2C User Flows
I have configured multiple Active Directory B2C user flows and can use each independently when I configure the "AzureAdB2C" settings in my appsettings.json file. If I don't use the appsettings.json and try and navigate to the b2clogin.com…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Azure AD - SAML with 3rd party as IDP
My current setup is .net web application plus Azure AD as IDP for my application. My application is a public web application where anyone can sign up and get in. We are in process of signing up a contract with one of our clients who already have their…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID

Signout Behaviour change in Custom POlicy and Builtin user flow.
Hi, I am having this strange issue with my Custom Policies…. Based on SocialAndLocalAccountsWithMfa starter pack. The behaviour that we are looking for is as follows and is achieved with User flows is When the user sign-outs form the…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

passport-azure-ad nodejs library unable to accept valid IEF generated id token
Just recently i found that passport-azure-ad nodejs library seems to no longer able to validate id token generated upon successful login on adb2c tenant. Last time i check it was working fine. Can anyone help me on this? My passport-azure-ad library…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Azure B2C - Rest Password Issue
Hi everyone, Description of the current issue: When the user resets their password via the Azure B2C screen's they become unauthorized and the API return’s a 401 HTTP status. This results in the user being stuck at the portal entry point, they will see…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

AD B2C Sign in with Apple with App Service already using Google Auth
Currently we are using the Google provider for the App Service's Authentication. On Apple enforcing that Sign in with Apple be available for iOS devices, we were hoping that the App Service Authentication would support it. On asking if that was something…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

MSAL login issue in iOS at the time of adding new user.
In my app, at first time users are able to login using the MSAL library. But when users try to add a new user from MSAL login page with the "Add new user" option, the new login screen appears but the keyboard does not appear to enter the…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Azure AD B2C sign in with ROP using v2 endpoint returns v1 token
I have an Azure AD B2C directory with an app registration and a local test user. I want to get an access token for the test user using the username and password, i.e. using Resource Owner Password Credentials (ROPC) grant. The app registration has…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID

Unable to add new OpenID Provider for Azure AD Multi tenant login in Azure B2C
I am trying to setup Azure B2C authentication with Dynamics 365 Portals. I need to setup Azure AD multi tenant login in Azure B2C, and am following the guide provided here When trying to add the Metadata url for the Azure AD provider I get the…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

How to get access to b2c-protected resources in a desktop application that has no user?
I have Azure Function Apps protected with Azure AD B2C Authorization. But I also need to get access to some of these functions from Desktop App that has no user (without user interaction). How can this be achieved?
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID

Azure B2C domain_hint multiple claims providers not working
I have configured a custom policy with three different claims providers and each of them have set "Domain" property to indicate domain_hint. However, domain_hint only works for the first two claims providers. For example: Claims providers…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Azure AD B2C claims (givenname, surname) are not being updated when signing in with IDP
When an Azure AD B2C account is set up after signing in with a IDP, the basic claim details are populated with data from the IDP, such as surname, givenname. When this information is changed in the IDP account, they are not being updated in the B2C…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

When to use custom xml policy in B2C?
The documentation says "In Azure Active Directory B2C, custom policies are designed primarily to address complex scenarios. For most scenarios, we recommend that you use built-in user flows." What scenarios should custom policy be used with? …
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Azure AD B2C authresp endpoint, the id_token validation in OpenId Connect flow custom policy gives invalid signature when signature is valid
We are working on an application that uses the LTI 1.3 specifications, which sits on top of the OpenId Connect 1.0 specification. The open id connect specs allow for initiating login from a 3rd party.…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Custom Policy: Local and social login relative positions changed?
We have custom B2C policies which allows the user to login in either via a local account or via social login (specifically, Office 365). We've been using this flow for approximately three years. Until recently, the social login option has appeared above…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Can we configure Application Insights for ADB2C custom policies in Production environment?
Hi All, Trying to understand if we can include "application insights" for ADB2C custom policies in production environment. I have tried using one but do not see any logs. Thanks for looking!
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Azure API Management in consumption tier and Azure AD B2C
Hi, Does Azure API Management in consumption tier support integration with Azure AD B2C for end user authentication and authorization? API Management pricing page indicates that in consumption tier, it does not support developer portal and Azure AD…
Azure API Management
Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Delete Azure B2C
I have old B2C portal i half setup 5-6 months ago that i was going to use for self education purposes, now that i am revisiting the topic i want to start from scratch however i cannot find any documentation on how to delete old B2C service. I've seen…