Azure AD B2C Webinar Series: Custom Policies Part 2 Policy Walkthrough

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Azure AD B2C Webinar Series
Custom Policy Walkthrough
John Garland
VP Cloud Development & Instructor, Wintellect
Azure MVP...

https://aka.ms/B2Cprecallsurvey
Session Guidelines

Date Time (PDT) Topic
20-Apr
21-Apr
2-3 PM
8-9 AM
Identity Protocols – OIDC, OAuth2
Recording: https://aka.ms/B2CWebinarRe...

Azure AD B2C Webinar Series
Custom Policy Walkthrough
John Garland
VP Cloud Development & Instructor, Wintellect
Azure MVP...

• Reviewing the Exercise – Collect a Loyalty Number from your Customers
• Getting Started with Azure AD B2C Custom Policie...

• Create a custom policy that will:
• Allow new users to sign up or existing users to sign in
• Users will create credenti...

Getting Started with Azure AD B2C Custom Policies
https://docs.microsoft.com/azure/active-directory-b2c/custom-policy-get-...

Key Value
Tenant Name AzureADB2CWebinarSeries
Signing Key Name B2C_1A_TokenSigningKeyContainer
Encryption Key Name B2C_1A_...

Initial Policy Setup
• Download or clone the
Custom Policy Starter Pack
• Create a workspace
• Update the policy files
wit...

• Policies can inherit from “parents” with the BasePolicy element
• Elements with similar ID’s are “merged”
• Locate the s...

Parent File:
<ClaimType Id="givenName">
<DisplayName>Given Name</DisplayName>
<DataType>string</DataType>
<UserHelpText>Yo...

Local account
sign-in
Read user by
Object ID from
Azure AD
Local account
sign-up
Relying party
application
Claims
Claims
C...

LoyaltyNumber Claims Definition
• Id (required)
• Display name (required)
• Data type (required)
• User input type
• Mask
...

• Policies can inherit from “parents” with the BasePolicy element
• Elements with similar ID’s are “merged”
• Locate the s...

1
• Show the sign-in form, sign-up link and password reset
• If user provides credentials on screen, then login to local a...

1
•Show the sign-in form, sign-up link and password reset
•If user provides credentials on screen, then login to local acc...

• An Orchestration Step can specify multiple preconditions that
determine if the step is to be run
• 2 Types of Preconditi...

User Journeys – Preconditions
<OrchestrationSteps>
...etc...
<OrchestrationStep Order="3" Type="ClaimsExchange">
<Precondi...

Local account
sign-in
Read user by
Object ID from
Azure AD
Local account
sign-up
Relying party
application
Claims
Claims
C...

Local account
sign-in
Read user by
Object ID from
Azure AD
Local account
sign-up
Relying party
application
Claims
Claims
C...

• Claims included as Output Claims
in the RelyingParty section are
included in the token
• Optionally, ClaimType reference...

Please take a few minutes to complete the feedback survey,
and we'll prepare a few questions to discuss.
https://aka.ms/B2...

Thank you!
Vinu Gunasekaran
Program Manager, Microsoft
John Garland
VP Cloud Development & Instructor, Wintellect
Azure MV...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1011447 views
Storytelling For The Web: Integrate... by Chiara Aliotta 919244 views
Artificial Intelligence, Data and C... by OECD Directorate ... 820562 views
How to Leverage AI to Boost Employe... by SocialHRCamp 342424 views
2024 State of Marketing Report – by... by Marius Sescu 195380 views
Everything You Need To Know About C... by Expeed Software 218594 views

View on Slideshare

1 of 31 Ad

View on Slideshare

1 of 31 Ad