Edit

Share via


Azure Active Directory B2C configuration properties

Property Description
spring.cloud.azure.active-directory.b2c.app-id-uri App ID URI that might be used in the aud claim of a token. For instance, https://{hostname}/{applicationId}. See Microsoft doc about APP ID URL for more details.
spring.cloud.azure.active-directory.b2c.authenticate-additional-parameters Additional parameters above the standard parameters defined in the OAuth 2.0 Authorization Framework. Would be added to the Authorization URL for customizing the Authorization Request. For instance, prompt: login. See Microsoft doc about more additional parameters information.
spring.cloud.azure.active-directory.b2c.authorization-clients The OAuth2 authorization clients, contains the authorization grant type(only support client credentials) and scope. The clients will be converted to OAuth2 ClientRegistration, the other ClientRegistration information(such as client id, client secret) inherits from the OAuth2 login client(sign-in user flow). For instance, authorization-clients.webapi.authorization-grant-type=client_credentials, authorization-clients.webapi.scopes[0]={WEB_API_APP_ID_URL}/.default.
spring.cloud.azure.active-directory.b2c.base-uri Azure AD B2C endpoint base uri.
spring.cloud.azure.active-directory.b2c.credential.client-id Client ID to use when performing service principal authentication with Azure.
spring.cloud.azure.active-directory.b2c.credential.client-secret Client secret to use when performing service principal authentication with Azure.
spring.cloud.azure.active-directory.b2c.enabled Whether to enable Azure Active Directory B2C related auto-configuration. The default value is false.
spring.cloud.azure.active-directory.b2c.jwt-connect-timeout Connection Timeout(duration) for the JWKSet Remote URL call. The default value is 500s. @deprecated If you want to configure this, please provide a RestOperations bean.
spring.cloud.azure.active-directory.b2c.jwt-read-timeout Read Timeout(duration) for the JWKSet Remote URL call. The default value is 500s. @deprecated If you want to configure this, please provide a RestOperations bean.
spring.cloud.azure.active-directory.b2c.jwt-size-limit Size limit in Bytes of the JWKSet Remote URL call. The default value is 50*1024. @deprecated If you want to configure this, please provide a RestOperations bean.
spring.cloud.azure.active-directory.b2c.login-flow Specify the primary sign-in flow key. The default value is sign-up-or-sign-in.
spring.cloud.azure.active-directory.b2c.logout-success-url Redirect URL after logout. The default value is http://localhost:8080/login.
spring.cloud.azure.active-directory.b2c.profile.tenant-id Azure Tenant ID. The values allowed for tenant-id are: common, organizations, consumers, or the tenant ID.
spring.cloud.azure.active-directory.b2c.reply-url Reply URL after get authorization code. The default value is {baseUrl}/login/oauth2/code/.
spring.cloud.azure.active-directory.b2c.user-flows Azure AD B2C User flows. Configure the user flow type and name mapping. For instance, sign-up-or-sign-in: B2C_signin_or_signup. See Microsoft doc about User flows for more details.
spring.cloud.azure.active-directory.b2c.user-name-attribute-name User name attribute name.