This was inspired by a stackoverflow question. It refers to a B2C sample custom policy. Looking at it, I felt like Alice in Wonderland: “Curiouser and curiouser!’ cried Alice”. This is an old sample. It still uses “socialIdpUserId”. <! — The claim socialIdpUserId has been renamed to issuerUserId → I…

There’s a good write-up here. Let’s go through the steps. I have an API that’s configured in App Registration called “ToDo API”.

I discussed Identities here. You may find that you get an error when you try and add an identity. Maybe it’s a duplicate? The question is how to find the duplicate identity in B2C? You can find the search query parameters here. I’ve used the B2C user utility. The search…

There’s a good description of identities in Azure AD B2C here. To paraphrase: “A customer account, which could be a consumer, partner, or citizen, can be associated with these identity types: Local identity — The username and password are stored locally in the Azure AD B2C directory. …

There’s a custom policy sample for TOTP here. There’s some documentation around MFA and TOTP display controls The sample assumes that you are only going to proof up with one authentication application. To that end, it calls “AzureMfa-GetAvailableDevices” and in the user journey, it checks “numberOfAvailableDevices” and if zero, then…

There are two good references for this: here and here. As usual, we use Beeceptor and the gist of the custom policy is here. The Beeceptor API is:

I’ve had a number of issues with a self-asserted page calling a validation TP. In the validation TP, I set a flag. Later on in the user journey, I test the flag but it never seems to be set. e.g. the validation TP has something like: <TechnicalProfile Id="regexAnalysisSignInName"> <DisplayName>Check signInName…

There are a number of mocks out there but I’m currently using Beeceptor. You can register and get a free account in minutes. Then you specify your root API URL. In my case, it’s: b2cxxx.free.beeceptor.com Now I want to mock a “Get customer details” call from B2C. …