locked
Silent user creation for external IDP in B2C RRS feed

  • Question

  • I am using Azure B2C to connect my own openid connect server using OpenID Connect (Preview) provider. I configured every thing, system is working fine.

    But one thing is when a new user logs in through my own openid connect server, Azure AD B2C creates this user in Azure AD which is connected to Azure B2C. 

    My intention is that, My client application has to call Azure B2C. Azure B2C should display list of identity providers. one among those providers is my own openid connect server. Then user can input his credential in my own openid connect server and verified and return back to Azure B2C with id_token. after this step Azure AD B2C is asking me to create this user in Azure AD. 

    In this process, B2C pops up user creation page for every new user. I want this user creation to happen silently without popping up user creation page.

    Thursday, July 5, 2018 9:13 AM

Answers

  • Hi,

    this is normal behavior as on the first time a user object is created in the B2C tenant which is "linked" to the identity in your IdP (if I remember correctly the altSecId Attribute is set)

    When using built-in policies you cannot skip that page, as sometime not all values for the Registration page are comming from an IdP like DisplayName and so on.

    So if all values are provided in the profile send by the IdP the Attribute are prefilled and can just be accepted.

    From my understanding you can only skip that page using a custom policy with your own custom user journey but Keep in mind that custom policies (IEF) are still in preview.

    /Peter


    Peter Stapf - ExpertCircle GmbH - My blog: JustIDM.wordpress.com

    Thursday, July 5, 2018 2:28 PM

All replies

  • Hi,

    this is normal behavior as on the first time a user object is created in the B2C tenant which is "linked" to the identity in your IdP (if I remember correctly the altSecId Attribute is set)

    When using built-in policies you cannot skip that page, as sometime not all values for the Registration page are comming from an IdP like DisplayName and so on.

    So if all values are provided in the profile send by the IdP the Attribute are prefilled and can just be accepted.

    From my understanding you can only skip that page using a custom policy with your own custom user journey but Keep in mind that custom policies (IEF) are still in preview.

    /Peter


    Peter Stapf - ExpertCircle GmbH - My blog: JustIDM.wordpress.com

    Thursday, July 5, 2018 2:28 PM
  • @Vetrivel Muthusamy Just checking in if you have had a chance to see the previous response. If that answers your query, do click “Mark as Answer” and Up-Vote for the same. If you have any further query, then do let us know.
    Saturday, July 7, 2018 7:13 AM
  • If we get all values for signup attributes then no popup will come
    Friday, July 13, 2018 4:14 AM
  • Thanks for the reply, didn't now that , always used custom policies for that to skip the profile fill step.

    Peter Stapf - ExpertCircle GmbH - My blog: JustIDM.wordpress.com

    Friday, July 13, 2018 5:44 AM