Comments (5)
You can combine these two samples:
HRD via Domain_Hint
HRD by collecting and parsing an email domain
Where a domain_hint is not passed, you can be sent to the default Idp, which Sample 1 does already, just swap the claimsExcahnge from the AAD OIDC technical profile to the LocalAccountSignIn technical profile reference Id.
Then use Sample 2 to see how to parse the domain from the email entry presented at the LocalAccountSignIn technical profile.
from samples.
I wonder if I might share my policy to see what am doing wrong as I feel like the logic I have is almost there? I have a parsed domain hint exchange followed by a prompted domain hint exchange preconditioned by the output of the first exchange. I have seen a couple different outcomes neither of which works exactly. One of the outcomes seems to end in some sort of infinite loop. My goal is to use the same matching lookup in both from a known list of domains.
from samples.
So, I closed this issue earlier since I did successfully implement parsed and then prompted HRD. It seems to work fine for interactive logins. I now am wrestling with silent token flow and MSAL.js in particular. @JasSuri When you consider these HRD schemes based on domain_hint etc. do you not think it is necessary to pass both login_hint and domain_hint in order to navigate the orchestration steps? I seem to be able to get silent access token call working only when I intercept a failing silent call and append both domain_hint and login_hint. I am specifically testing the behavior with my policy and this MSAL.js PR changes - AzureAD/microsoft-authentication-library-for-js#1299
from samples.
I'll look into this and confirm.
from samples.
Closing this issue, as it was determined there was an orchestration step without any session management. There is no need to pass login_hint or domain_hint in this sample for silent token calls.
from samples.
Related Issues (20)
- Application claim "Identity Provider Access Token" not received HOT 1
- Cannot upload the modified B2CMigrate_Extensions HOT 1
- disable inactive account custom policy not working HOT 1
- Conditional Access Policies allow SignUp HOT 2
- Custom policy `change-sign-in-name`: The page cannot be displayed because an internal server error has occurred. HOT 1
- SelfAssert API return error code 400 when try to sign in after leaving idle overnight
- Policy sign-up-deep-link - Login Navigation HOT 3
- ROPC - Set grant_type, scope and client_id as default
- Azure AD B2C Front-channel logout URL Not Working HOT 1
- Azure B2C Password does not match error bad behaviour
- Whitespace error during policy validation
- All the demo in Sample package not work HOT 3
- Restore-MFA-Phone-Number Sample locks up after email address entry, doesn't send verification email HOT 1
- JWTissuer - Keyset does not exist exception HOT 2
- Token acquisition requires the secret of the client used to login to B2C, rather than the secret of the calling application
- Not able to update custom user attribute passwordResetOn through custom policy
- ReturnOAuth2Error on RedeemRefreshToken does not throw error and outputs 2 refresh token bodies
- SelfAssertedAttributeProvider page layout version >= 2.1.20 breaks the error messages at the top of the templated form
- Getting error on upload DeleteMyAccount.xml
- To skip the screen which forces the user to login with matched account while autoaccountlink
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from samples.