2021年2月2日星期二

Azure AD B2C "email" claim is missing from JWT with standard sign up policy

I'm working on a web app that uses AAD B2C for authentication, I have setup default inbuilt sign up/sign in flows for it, and its all working fine. However I have noticed that instead of returning a claim with a single primary email of the user, it instead returns a collection of emails, in my test case it is a collection which only contains my only email. I'm curious, is it possible to configure it in such a way that it would include a primary email address claim to JWT when I sign in? From what I have seen when configuring attributes to collect/return for my base user flows, it is possible to collect email when the user signs in, but only "EmailAddresses" collection can be marked to be returned with the token. Is there a way to change this behavior, or is it by design and I am missing a bigger picture?

https://stackoverflow.com/questions/66021121/azure-ad-b2c-email-claim-is-missing-from-jwt-with-standard-sign-up-policy February 03, 2021 at 12:07PM

没有评论:

发表评论