logo
Tags down

shadow

Azure B2C custom policy and Client Id


By : Chanel Hunter
Date : October 16 2020, 06:10 PM
wish help you to fix your issue If my understanding is correct, based on the official docs those are application ids, of two application with given name in your B2C. In the doc above there is an other link Getting Started which describes what application you should define:
IdentityExperienceFramework (with this exact name) ProxyIdentityExperienceFramework (with this exact name)
code :


Share : facebook icon twitter icon

Java client to set SAS, Policy and CORS on Azure


By : user4589951
Date : March 29 2020, 07:55 AM
To fix the issue you can do I tried to reproduce the issue, and checked carefully the Java Client code & erros in JS console. I found that the issue was caused by using blob container Shared Access Signature for the uploading file url.
Here is the Java code modified by yours.
code :
private static final String accountName = "<account-name>";
private static final String accountKey = "<account-key>";
private static final String connectionStringTemplate = "DefaultEndpointsProtocol=http;AccountName=%s;AccountKey=%s";
private static final String containerName = "<block-blob-container-name>";
private static final String blobFileName = "<blob-file-name>";

public static void main(String[] args) throws InvalidKeyException, URISyntaxException, StorageException {
    String connectionString = String.format(connectionStringTemplate, accountName, accountKey);
    CloudStorageAccount account = CloudStorageAccount.parse(connectionString);
    CloudBlobClient blobClient = account.createCloudBlobClient();
    /*
     * Enable CORS
     */
    // CORS should be enabled once at service startup
    // Given a BlobClient, download the current Service Properties
    ServiceProperties blobServiceProperties = blobClient.downloadServiceProperties();
    // Enable and Configure CORS
    CorsProperties cors = new CorsProperties();
    CorsRule corsRule = new CorsRule();
    List<String> allowedHeaders = new ArrayList<String>();
    allowedHeaders.add("*");
    EnumSet<CorsHttpMethods> allowedMethods = EnumSet.of(CorsHttpMethods.PUT, CorsHttpMethods.GET, CorsHttpMethods.HEAD, CorsHttpMethods.POST);
    System.out.println(Arrays.toString(allowedMethods.toArray()));
    List<String> allowedOrigins = new ArrayList<String>();
    allowedOrigins.add("*");
    List<String> exposedHeaders = new ArrayList<String>();
    exposedHeaders.add("*");
    int maxAgeInSeconds = 1800;
    corsRule.setAllowedHeaders(allowedHeaders);
    corsRule.setAllowedMethods(allowedMethods);
    corsRule.setAllowedOrigins(allowedOrigins);
    corsRule.setExposedHeaders(exposedHeaders);
    corsRule.setMaxAgeInSeconds(maxAgeInSeconds);
    cors.getCorsRules().add(corsRule);
    blobServiceProperties.setCors(cors);
    // Commit the CORS changes into the Service Properties
    blobClient.uploadServiceProperties(blobServiceProperties);
    /*
     * Generate the SAS for the uploading url
     */
    CloudBlobContainer container = blobClient.getContainerReference(containerName);
    CloudBlockBlob blockBlob = container.getBlockBlobReference(blobFileName);
    SharedAccessBlobPolicy sharedAccessBlobPolicy = new SharedAccessBlobPolicy();
    GregorianCalendar calendar = new GregorianCalendar(TimeZone.getTimeZone("UTC"));
    calendar.setTime(new Date());
    sharedAccessBlobPolicy.setSharedAccessStartTime(calendar.getTime());
    calendar.add(Calendar.HOUR, 1);
    sharedAccessBlobPolicy.setSharedAccessExpiryTime(calendar.getTime());
    sharedAccessBlobPolicy.setPermissions(EnumSet.of(SharedAccessBlobPermissions.WRITE));
    String sas = blockBlob.generateSharedAccessSignature(sharedAccessBlobPolicy, null);
    System.out.println(sas);
    String blobUploadSASURL = String.format("https://%s.blob.core.windows.net/%s/%s?%s", accountName, containerName, blobFileName, sas);
    System.out.println(blobUploadSASURL);
}

Get the Azure AD B2C Application client id in the custom policy


By : zzwfe
Date : March 29 2020, 07:55 AM
it should still fix some issue Ok its a bit of a work around but I tried with a standard UserJourneyContextProvider technical profile and this didnt work
so to get the client id as a claim I did the following
code :
<OrchestrationStep Order="2" Type="ClaimsExchange">
  <ClaimsExchanges>
   <ClaimsExchange 
       Id="ClientIdFromOIDC-JC" 
       TechnicalProfileReferenceId="Get-ClientID-FromOIDC"/>
   </ClaimsExchanges>
  </OrchestrationStep>     
<TechnicalProfile Id="Get-ClientID-FromOIDC">
    <DisplayName>Get-ClientID-FromOIDC</DisplayName>
    <Protocol Name="Proprietary" 
    Handler="Web.TPEngine.Providers.RestfulProvider, Web.TPEngine, 
    Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" />
    <Metadata>
     <Item Key="AuthenticationType">None</Item>
     <Item Key="ServiceUrl">--FUNCTION APP URL--</Item>
     <Item Key="SendClaimsIn">QueryString</Item>
    </Metadata>
    <InputClaims>
      <InputClaim 
        ClaimTypeReferenceId="client_id" 
        PartnerClaimType="client_id"  
        DefaultValue="{OIDC:ClientId}" />
     </InputClaims>
     <OutputClaims>
       <OutputClaim ClaimTypeReferenceId="client_id" />
      </OutputClaims>
  </TechnicalProfile>
  public static async Task<HttpResponseMessage> Run(HttpRequestMessage req, 
  TraceWriter log)
  {
       log.Info("C# HTTP trigger function processed a request.");
      // parse query parameter
      string client_id = req.GetQueryNameValuePairs()
        .FirstOrDefault(q => string.Compare(q.Key, "client_id", true) == 0)
        .Value;

      return req.CreateResponse<ResponseContent>(
      HttpStatusCode.OK, new ResponseContent
      {
          version = "1.0.0",
          status = (int) HttpStatusCode.OK,
          client_id = client_id
      },
      new JsonMediaTypeFormatter(), "application/json");

   }

   class ResponseContent {
     public string version;
     public int status;
     public string client_id;
 }

Unable to query custom REST API within Azure AD B2C custom policy


By : user1676395
Date : March 29 2020, 07:55 AM
may help you . After some team discussion, it turns out that the Web Application Firewall (WAF) configured on our Azure Application Gateway was blocking the request and returning an HTTP response of 403 because B2C wasn't sending an HTTP header for User-Agent.
The request worked after disabling the WAF rule that was blocking it.

Calling the Azure AD Graph API from an Azure AD B2C custom policy?


By : Erwin
Date : March 29 2020, 07:55 AM
should help you out The REST API call in an Azure AD B2C custom policy defines a fixed URL in the "ServiceUrl" field. , Edit March 1st: Regarding your question

Azure Active Directory B2C Custom Invite Policy - Passing Custom Claims Between Steps


By : user2980834
Date : March 29 2020, 07:55 AM
help you fix your problem For a user journey to receive an incoming claim from the input JWT, you must add an to the relying party :
code :
<RelyingParty>
  <TechnicalProfile Id="PolicyProfile">
    <InputClaims>
      <InputClaim ClaimTypeReferenceId="email" />
      <InputClaim ClaimTypeReferenceId="extension_DBId" />
    </InputClaims>
  </TechnicalProfile>
</RelyingParty>
<InputClaim ClaimTypeReferenceId="extension_DBId" PartnerClaimType="DBId" />
Related Posts Related Posts :
  • Using managed identities in queue triggers in azure functions
  • How to force Azure Data Factory Data Flows to use Databricks
  • Azure Functions not showing up in Function app in portal
  • Azure Search on Central India Region
  • Azure function not working properly after deployed
  • Connect to Azure Database for Postgresql through VPN
  • Get Details of an public IP in azure
  • Limit number of instances of Azure Function Apps v2
  • Databricks : difference between mount and direct access of Data Lake Storage Gen 2
  • Sending an event on creating a new file in azure data lake gen 1
  • Which Azure storage technology for weather forecast data
  • is it possible to customize the events that a blob within a storage account fires on blob creation?
  • Connect-AzureRMAccount : The term 'Connect-AzureRMAccount' is not recognized as the name of a cmdlet, function, script f
  • How to write partitioned parquet files to blob storage
  • How to ignore locked resources with 'Complete' mode deployment to Azure?
  • Is there any problem with my query to get my token?
  • Add Images to QnA Maker
  • Downloading and creating empty folder in azure blob with aspcore
  • Files with different headers to copy data in azure dwh table
  • Is new ms botbuilder directline speech good fit for call center scenario?
  • Azure Function Detailed logging on Internal Server Error
  • How do I provision throughput on a container?
  • ACR to AKS deployment ERROR: The container operating system does not match the host operating system
  • While creating Azure HDInsight cluster for Starburst Presto, can I create Spark Cluster?
  • Azure Key Vault certificate - create Basic Constraints CA:True
  • How to stop outbound HTTP connections from timing out
  • Running Kubernetes across cloud providers
  • Changing style in Azure Maps slow
  • ARM Template Accessing Object Property through Parameter as property name
  • How do you monitor Azure Event Hub consumer lag?
  • Why do my tests in an Azure DevOps Build Pipeline run twice?
  • Fail to get secret from Azure Key Vault using user-assigned identity
  • Publishing .NET Core Web App to Linux on Azure
  • How to Get Autocomplete with Several Words
  • pod are not getting created in kubernetes but deployment exists?
  • How to call an Azure Function App API with Easy-Auth Enables using Active Directory from a C# Client
  • How to avoid temp folder clean up on restart Azure VM?
  • Mutual or individual Kubernetes clusters?
  • Singleton Azure Cosmos DB client
  • Embed Azure Time Series Insights using JavaScript library
  • ARM nested template ‘Invalid Template could not find template resource’
  • Azure Functions - Return values with no output bindings? Is this possible?
  • What is the maximum capacity of Azure Blob Storage account?
  • How to convert CSV to JSON using template via Azure Logic App
  • Sending Batch request to azure cognitive API for TEXT-OCR
  • ImagePullBackOff unauthorized: authentication required
  • Azure Cloud Worker Role not getting enough CPU usage
  • How do I securely store connection strings client id etc?
  • Is there a Java SDK for azure machine learning service?
  • Why Azure takes so long to setup a Load Balancer?
  • Mail.ReadBasic equivalent Application scope
  • Could not find a ready tiller pod (Error)
  • How can I see the rowcounts for tables in a log analytics workspace?
  • Auto deploy on azure kubernates when docker image is updated: possible?
  • Custom Template in Azure B2C doesn't work in IE11 when JavaScript is enabled
  • Is there any rest API or SDK from microsoft Azure which will give me list of all images on azure galary?
  • How to add owners for Microsoft App in registration portal?
  • Who has invited a guest user
  • How to forecast billing for Azure Logic Apps with Enterprise Connectors?
  • Unable to run azure function getting error as connection string not set
  • shadow
    Privacy Policy - Terms - Contact Us © 35dp-dentalpractice.co.uk