Reputation: 59
I am using Azure ADB2C. Then, we use ADB2C's custom policy to create a login screen. After successful login, you will be redirected to SPA. In other words, the login screen and the SPA are separated. In such cases, where are the tokens(ex:access token,ID token, refresh token) issued after a successful login stored? If you are creating your own login screen and using MSAL, you would have the choice of localstorage or sessionstorage. However, my login screen is created from ADB2C's custom policy and I don't know how to set it up. (Login Screen example:https://XXXXXXX=B2C_1_signin) Is it set in a custom policy? Please let me know.
Upvotes: 1
Views: 1307
Reputation: 11315
Doesn’t matter if you’re using custom policy, MSAL still manages the tokens in local or session storage.
Upvotes: 1