search

Azure-Samples / ms-identity-java-webapp

A Java web application calling Microsoft graph that is secured using the Microsoft identity platform
MIT License
118 stars 105 forks source link

msal-b2c-web-sample doesn't allow the use of built-in user flows or custom policies #62

Open lizetpenamsft opened 3 years ago

lizetpenamsft commented 3 years ago

In the readme.md file there are no instructions on how to configure the different built-in user flows or custom policies (if the cx has configured IEF and custom policies in the tenant). It isn't clear in the configuration in the code or the instruction in the readme.md file where to set the built in user flow to sign in a user in the web app; and obtain access_token and id_token via the Auth Code Grant from B2C. It's also not clear where to use the rest of the user flows/journeys ie. password reset, sign up, profile edit etc.

lizetpenamsft commented 3 years ago

@navyasric, @Avery-Dunn the web application msal-b2c-web-sample, doesn't have clear instructions on how to include built-in user flows or custom policies to the requests made by MSAL to the B2C endpoints.

For example https://tenant.b2clogin.com/tenant.onmicrosoft.com/policy-name/oauth2/v2.0/authorize where policy-name could be B2C_1A_SignIn or https://tenant.b2clogin.com/tenant.onmicrosoft.com/v2.0/.well-known/openid-configuration?p=**B2C_1A_signin**