B2C now supports client credentials. There is also a GitHub sample. Note that the RelyingParty in the sample doesn’t appear to do anything, but you can’t remove it. Otherwise, you get: AADB2C90031: Policy 'B2C_1A_abc' does not specify a default user journey. Ensure that the policy or it's parents specify a…

I was creating a custom policy when I got this error:

In the base custom policy, there are some examples of how to read a user record e.g. read by email or read by objectID. There’s a sample of reading by phone number here, but there is a lot of code to understand, so I thought I would concentrate on the…

One question I’m often asked is if it is possible to change the default MFA method in the MFA custom policy in the starter pack. The answer is “Yes”, and this post shows one example of how to do this. For this post, I’ve used Authsignal, which is an MFA…

For a recent user group presentation, I thought I would demonstrate how to configure a VC and then test it via Postman. The idea for the demo. was that members who signed up would get some gourmet pastries as well as the usual pizza. This would only be available to…

Claims in a VC can be both text and image. There is not much information about VC images out there, but the docs. refer to: “The uploaded photo for the user. The image type should be JPEG and the maximum size is 2MB. When presenting the photo claim to a…

There are several ways to do this. You could use the “Paragraph” method, JS / CSS or add extra text to the claims “DisplayName”. But you can also add the text as input fields: <InputClaims> <InputClaim ClaimTypeReferenceId="label_text" DefaultValue="Some wording" AlwaysUseDefaultValue="true"/> </InputClaims> <OutputClaims> <OutputClaim ClaimTypeReferenceId="label_text" /> </OutputClaims> All good!

From the docs: “DIDs are user-generated, self-owned, globally unique identifiers rooted in decentralized systems like ION. They possess unique characteristics, like greater assurance of immutability, censorship resistance, and tamper evasiveness. These attributes are critical for any ID system intended to provide self-ownership and user control. Microsoft’s verifiable credential solution uses…

There’s a good overview here. Imagine Woodgrove is a trusted site that issues credentials. My site offers a discount to all Woodgrove employees. The question is how do I know what “metadata” to use (Woodgrove DID’s etc.) to accomplish this. This is what the verified ID network is used for. …