Vivek N
Vivek N

Reputation: 991

Azure AD B2C Claims do not include mapped Custom IdP claims

I have Azure AD B2C directory and have added our other separate Azure AD (AAD) as an Identity Provider (as Open ID Connect Provider) in Azure AD B2C. I am able to sign in just fine using the custom IdP which links to AAD.

I also have Identity provider claims mapping set as "User ID" to oid, "Display name" to name, "Given name" to given_name, "Surname" to family_name and "Email" to preferred_name (per following link). But when I get the token back and inspect it using https://jwt.ms/, it does not have those claims. When I inspected the "idp_access_token" claim and it has oid, given_name, family_name etc. returned by AAD. I'm not sure where I'm missing. I want these claims to be in the token issued by B2C.

Any help is appreciated.

https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-azure-ad-single-tenant?pivots=b2c-user-flow

I have selected all of these "Application Claims" in my user flow enter image description here

Upvotes: 3

Views: 1677

Answers (1)

Allen Wu
Allen Wu

Reputation: 16438

You probably missed a step: Configuring optional claims.

enter image description here

enter image description here

Upvotes: 4

Related Questions