1

Using Angular 7 with MSAL.js and Azure AD B2C.

Implementing a role-based authentication is not directly supported by Azure AD B2C and requires the use of Azure Ad Graph API.

https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/10123836-get-user-membership-groups-in-the-claims-with-ad-b

Authorize By Group in Azure Active Directory B2C

Is there a way to use MSAL with Azure AD Graph API to support roles (through claims or Azure AD B2C security groups)?

Adam
  • 3,872
  • 6
  • 36
  • 66
  • 1
    Whoever voted this to close as "Too Broad" and gave a down vote: Asking for "a way" out of nothing on the Internet for this is not too broad. I would appreciate if you comment why you think it is too broad after viewing and reading the supplied links. – Adam Jan 15 '19 at 11:13
  • Hi Adam, did you ever manage to find something out about this? – Andrew Feb 12 '19 at 19:21
  • @Andrew No, couldn't find any – Adam Mar 05 '19 at 13:50

1 Answers1

0

You can add roles in the manifest of an application registration, that way you will get a roles claim with those roles defined.

Here is an article on how to create roles: How to add app roles in AAD.

If you are using groups instead you can associate a role to each group.

Ana Franco
  • 1,611
  • 3
  • 24
  • 43