B2Clogin.com replacing login.microsoftonline.com?

Azure-Samples / active-directory-b2c-custom-policy-starterpack

Azure AD B2C now allows uploading of a Custom Policy which allows full control and customization of the Identity Experience Framework

http://aka.ms/aadb2ccustom

MIT License

340 stars 394 forks source link

B2Clogin.com replacing login.microsoftonline.com? #70

Open stephenstroud opened 4 years ago

stephenstroud commented 4 years ago

Should these URLS be updated given this update?

JFMarty commented 4 years ago

I think so too, but according to issue #63 the b2clogin-urls result in username or password incorrect errors. I have the same problem and I'm still working on using b2clogin.com instead of login.microsoftonline.com ....

JFMarty commented 4 years ago

Update: After spending the better part of a day working on this problem, I believe login.microsoftonline.com is still valid for this technical profile.

In this discussion https://github.com/MicrosoftDocs/azure-docs/issues/46236 its made clear, the deprecation of login.microsoftonline.com is online for the actual b2c parts and not for the underlying Azure AD. Its my understanding that the technical profile login-NonInteractive uses the Azure AD and not b2c and so login.microsoftonline.com should still be valid for the foreseeable future.

But it would be nice to get an confirmation of an expert before rolling this out to production and getting problems on December 4th.

stephenstroud commented 4 years ago

I updated mine to: https://whatever.b2clogin.com/{tenant}/B2C_1A_signin_only/v2.0/.well-known/openid-configuration no issues no so far.

It should be okay if you had a tenant prior according to this? "New tenants created after this announcement will no longer be able to accept requests from login.microsoftonline.com."

JFMarty commented 4 years ago

Thanks for the info. I tried to update the first one () and it works, but when I update the second one too (), I get an error message "username or password invalid".

According to this post: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/1771#issuecomment-616819977 I should still be able to use login.microsoft.com for non-policy related requests. But I'll try with a new tenenat to be sure before doing anything in production :)

VitCJr commented 3 years ago

Hi, colleagues. I'm confirming issue "username or password invalid". I was using this documentation "Get started with custom policies in Azure Active Directory B2C" - no luck with a LocalAccounts, I wasn't able sign-in..

Also, I noticed quite interesting things - looks like sign-up and password reset flows are working from "active-directory-b2c-custom-policy-starterpack-master\LocalAccounts" templates.

It Looks like something with permissions.

I can sign-up;
I can reset password.

Not sure how to troubleshoot further.

VitCJr commented 3 years ago

Hi, colleagues. I'm confirming issue "username or password invalid". I was using this documentation "Get started with custom policies in Azure Active Directory B2C" - no luck with a LocalAccounts, I wasn't able sign-in..

Also, I noticed quite interesting things - looks like sign-up and password reset flows are working from "active-directory-b2c-custom-policy-starterpack-master\LocalAccounts" templates.

It Looks like something with permissions.

I can sign-up;

I can reset password.

Not sure how to troubleshoot further.

UPDATE #1: my issue was resolved - posted solution here https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/issues/22#issuecomment-740521529

Kressilac commented 3 years ago

I'm using the SendGrid custom templates that are based on the Local Accounts templates. Cannot sign in but all other policies are working correctly. See my comment on the App Registration issue. https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/issues/72#issuecomment-813162438