Questions tagged [azure-ad-b2c]

Azure AD B2C is a cloud identity management solution for web and mobile applications targeting your customers (consumers and businesses).

Azure Active Directory B2C

Azure AD B2C is a cloud identity management solution for your web and mobile applications. It is a highly available global service that scales to hundreds of millions of identities. Built on the same enterprise-grade secure platform as Azure AD, Azure AD B2C keeps your applications, your business, and your customers protected.

>> Get started with Azure AD B2C

Features

  • Email-based or username-based local accounts
  • Social identity providers (Facebook, Google, Microsoft and more)
  • Custom identity providers (OpenID Connect, SAML and more)
  • Built-in user journeys (sign up/sign in, edit profile, password reset)
  • Custom user journeys
  • Built-in and custom user attributes
  • Configurable application claims
  • User interface customization
  • Multi-factor authentication

Posting Azure AD B2C questions in Stack Overflow

The following tips will help you get quicker/better answers when posting Azure AD B2C questions:

5577 questions
50
votes
2 answers

Azure AD vs Azure AD B2C vs Azure AD B2B

Before Azure AD B2C and Azure AD B2B come into the picture, usualy I added my applications to Azure AD of our tenancy and office 365 users could access the applications using their account (SSO). I am not a guru so I need to see code and read about…
user217648
  • 3,338
  • 9
  • 37
  • 61
44
votes
8 answers

Authorize By Group in Azure Active Directory B2C

I am trying to figure out how to authorize using groups in Azure Active Directory B2C. I can Authorize via User, for example: [Authorize(Users="Bill")] However, this is not very effective and I see very few use-cases for this. An alternate solution…
Green_qaue
  • 3,561
  • 11
  • 47
  • 89
35
votes
7 answers

Azure Portal: Bad Request - Request Too Long

I just received the following error when I tried to run a built-in b2c edit policy from portal.azure.com. I have 2 tabs of the portal open. Why am I receiving this error? Bad Request - Request Too Long HTTP Error 400. The size of the request…
spottedmahn
  • 14,823
  • 13
  • 108
  • 178
33
votes
1 answer

What's the difference between Azure AD B2C tenant and normal Azure AD tenant?

I've seen so many people are very confused about what we can do in Azure AD B2C tenant and the difference between a B2C tenant and normal Azure AD tenant. The main questions are: What's the difference between Azure AD B2C tenant and normal Azure AD…
Wayne Yang
  • 9,016
  • 2
  • 20
  • 40
31
votes
3 answers

Azure AD B2C self service password reset link doesn't work

I have been able to properly setup sign-up/sign-in policy for a tenant I'm testing. I have set the Reset Password property to allow everybody to reset their password using their email. Currently the user signs up using their email (also their…
Riz
  • 6,486
  • 19
  • 66
  • 106
28
votes
1 answer

Azure AD B2C - Role management

I have an Asp.NET MVC Application connected with Azure AD B2C. In the Administrator settings I've created an Administrators Group: In my code I would like to use [Authorize(Roles = "Administrator")] With regular Azure Active Directory it was easy…
DarkWing89
  • 319
  • 2
  • 4
  • 10
27
votes
5 answers

AADSTS700016: Application with identifier 'some_id' was not found in the directory 'some_another_id'

I need a federated authentication with custom policy (when user authenticated I need him to appear marked as Federated in b2c users, not Others or something else what I could achieve with single tenant), I had it before with default policy setup in…
basilio
  • 271
  • 1
  • 3
  • 4
24
votes
1 answer

Azure B2C: How do I get "group" claim in JWT token

In the Azure B2C, I used to be able to get a "groups" claim in my JWT tokens by following Retrieving Azure AD Group information with JWT: Open the old-school Azure manager (https://manage.windowsazure.com) Register my application with B2C Download…
21
votes
5 answers

Azure AD B2C: Clients must send a client_secret when redeeming a confidential grant

I try to setup authentification for an Angular app using authorization code and Azure AD B2C (oidc-client on client side), but I'm getting these errors from Angular: After looking in B2C audit logs, I found this error message: Clients must send a…
Maxime Gélinas
  • 2,202
  • 2
  • 18
  • 35
21
votes
6 answers

Request Access Token in Postman for Azure AD B2C

How can I request an Access Token in Postman against an Azure AD B2C tenant? I tried taking the url from Run Now in the Azure portal and putting that in the Auth Url but that produces the following error: Update Following Chris's answer, I'm now…
spottedmahn
  • 14,823
  • 13
  • 108
  • 178
20
votes
2 answers

Can I disable sign-up in Azure AD B2C?

Can I disable sign-up in Azure AD B2C? In other words, I don't want customers to sign up accounts by themselves, I want it to be done only by admin in Azure. Thanks.
martial
  • 3,773
  • 8
  • 33
  • 43
20
votes
6 answers

headless authentication Azure AD b2c

I am looking for a way to authenticate a user by username/password in a headless manner for Azure AD b2c. Azure AD b2c is great but we feel the redirects for logins can lead to confusion among customers (and sometimes even prevented by some…
Gina Marano
  • 1,773
  • 4
  • 22
  • 42
19
votes
2 answers

What use are 'Scopes' in Azure B2C Authentication?

I don't understand how the 'Scopes' in Azure B2C are supposed to be used. They are associated with an API, but not a user. I'm sure I'm missing something, but I see no practical use for something associated with an API. I've used and implemented…
Quark Soup
  • 4,272
  • 3
  • 42
  • 74
19
votes
1 answer

Add claims into token Azure B2C

What are ways to include custom claims (user subscriptions or roles list as example) in a token before issuing it in Azure AD B2C, provided that claims are stored somewhere on own server (not available in B2C)? Goal to have claims in the token to…
st1
  • 661
  • 1
  • 6
  • 12
18
votes
1 answer

Azure MSAL JS: How to edit profile?

I've successfully implemented MSAL JS for Azure AD B2C. The next step is to let the user edit their profile. I've created a new policy for Edit Profile. But how to redirect the user there? There are only login methods / acquire token methods. I've…
Boland
  • 1,531
  • 1
  • 14
  • 42
1
2 3
99 100