CODEWITHSUNDEEP
azureazure-ad-b2csaml
Karikalan
Karikalan

Reputation: 167

Azure B2C SAML response missing email address attribute

I've registered SAML application using the MS ref: https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy

My SignUpOrSignin.xml has the outputclaim tags to return email attribute value as SAML response, but I'm getting rest of the attributed value except use account email in SAML response. I've confirmed that user account has valid email value in Azure B2C AD. Not sure what I am missing here? Do I need configure any other setting to get email attribute value in SAML response, please?

enter image description here

Upvotes: 0

Views: 1622

Answers (1)

Jas Suri - MSFT
Jas Suri - MSFT

Reputation: 11335

Add the outputClaim in AAD-UserReadUsingObjectId.

<OutputClaim ClaimTypeReferenceId="email" PartnerClaimType="ATTRIBUTE_NAME" />

Usually the email is stored in the attribute: signInNames.emailAddress.

Upvotes: 2

Related Questions