Comments (11)
@JasSuri With custom policy you can transfer those claims in read only too. The default behaviour is to allow the user to edit that data.
This doesn't affect us any more as we are moving to a custom policy, but please note that allowing editing of user data makes B2C unusable without custom policies. Even if you fix the prefilling bugs it's still unusable because it involves an extra screen appearing. C stands for consumer and consumers need a streamlined process. When we used default policies all reviewers found the B2C login part of our app inadequate. The login experience needs to be as simple using B2C as it is for native successful apps on ios/android/windows.
from samples.
@JasSuri closing this issue without doing anything is not correct. It's still a bug that the GivenName and Surname claims aren't filled correctly. Regardless of the flow people would like to use. These 2 default claims should be there. It works for Facebook so why shouldn't it for Microsoft accounts
from samples.
If I understand correctly, the question is related to user flow and not custom policy. If that is the case, B2C should extract the GiveName and Surname from the external IDP, and present it to the user (pre-fill the value), so user can change the default values return be the external IDP.
As you mentioned if the claims are not specified in the "User Attributes", they are empty and not return to the "Application claims".
With custom policy, you can transfer the claims from the external IDP directly to the app, without asking the user to provide the values (also the values are pre-filled)
from samples.
Thanks. Yes this is user flow.
B2C should extract the GiveName and Surname from the external IDP, and present it to the user (pre-fill the value), so user can change the default values return be the external IDP.
I see. Seems strange to allow editing of these things. But regardless, GivenName and Surname are not getting pre-filled.
from samples.
With custom policy you can transfer those claims in read only too. The default behaviour is to allow the user to edit that data.
from samples.
B2C should extract the GiveName and Surname from the external IDP, and present it to the user (pre-fill the value)
On further testing, we are finding that Google accounts and Active Directory do pre-fill GivenName and Surname fields. However Microsoft accounts don't. So there is a current bug with the Microsoft account user flow identity provider not pre-filling these fields.
from samples.
Same issue is available in GitHub B2C integration as well. Given Name/SurName and email not populating. Is it bug in Azure AD B2C tenant of is there any solution for that ? (related to user flow SignIn/SingUp)
from samples.
@charlesroddie thanks for the feedback. It is tricky for us to build prebaked flows due to the “C” you mention, everyone’s customers are different and they want different UXs. Essentially if the User Flows are not getting the UX you need, the Custom Flows allow you the full customisability. On that I shall close this off.
from samples.
I have the same problem with Okta accounts - given name and family name are not prefilled. If I request an Okta token with the profile
scope I get back the given name, last name, and display name claims. When I request the token through B2C, I only get back the display name. The claim configuration all looks correct (in the IDP config and the user flow config).
from samples.
Raise this issue on stackoverflow please, it is not an issue with any of the custom policy examples here.
from samples.
@JasSuri, @charlesroddie and @blieven1 both nailed it. The UX of the built in user flows is so bad, they're unusable. I would love to use Custom policies, except developing those is literally 20x the amount of dev work, they are VERY difficult to implement. Way too much XML, dizzying documentation, no designer tool that can generate the plethora of xml needed, and extremely time consuming and difficult to test and debug.
True, all companies have their own UX (like some want the user to edit first/last name, others want to skip and fast-track the sign-up). But that is as simple as a checkbox in the portal config. A few tweaks to the platform could go a long way in meeting more needs out of the box.
Now, as for where this feedback should be posted, are you suggesting stack overflow? That is more of a question/answer place on how to do things. Where is the best place for feature requests / ux fixes for b2c both built-in and custom policies, etc?
from samples.
Related Issues (20)
- Sometimes the Continue button doesn't work
- Recurring prompt to enroll in Multi-Factor Authentication (MFA) using TOTP HOT 11
- Azure B2C identity provider increased the length of their generated authorization codes HOT 1
- Application claim "Identity Provider Access Token" not received HOT 1
- Cannot upload the modified B2CMigrate_Extensions HOT 1
- disable inactive account custom policy not working HOT 1
- Conditional Access Policies allow SignUp HOT 2
- Custom policy `change-sign-in-name`: The page cannot be displayed because an internal server error has occurred. HOT 1
- SelfAssert API return error code 400 when try to sign in after leaving idle overnight
- Policy sign-up-deep-link - Login Navigation HOT 3
- ROPC - Set grant_type, scope and client_id as default
- Azure AD B2C Front-channel logout URL Not Working HOT 1
- Azure B2C Password does not match error bad behaviour
- Whitespace error during policy validation
- All the demo in Sample package not work HOT 3
- Restore-MFA-Phone-Number Sample locks up after email address entry, doesn't send verification email HOT 1
- JWTissuer - Keyset does not exist exception HOT 2
- Token acquisition requires the secret of the client used to login to B2C, rather than the secret of the calling application
- Not able to update custom user attribute passwordResetOn through custom policy
- ReturnOAuth2Error on RedeemRefreshToken does not throw error and outputs 2 refresh token bodies
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from samples.