Invite policy with client assertion deprecated?

mrochon / b2csamples

MIT License

132 stars 41 forks source link

Invite policy with client assertion deprecated? #28

Closed davidspiess closed 2 years ago

davidspiess commented 2 years ago

I noticed a warning in the B2C documentation that client assertion is deprecated.

https://github.com/azure-ad-b2c/samples/blob/master/policies/invite_deprecated/Readme.md Should the invite example be changed to accept an id_token?

mrochon commented 2 years ago

Custom policy using client_assertion is deprecated in lieu of the sample using id_token_hint. Use of client_assertion is not deprecated. However, AFAIK, it has never been properly documented either so yes, you are better off using id_token_hint going forward.