Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Azure B2C with Facebook provider

I try to connect my azure B2C to Facebook login. I read this https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-setup-fb-app

But I still receive this error when Azure transfer me to Facebook:

Blocked URL: This redirection failed because the redirection URI is not allowed in the OAuth client settings of the application. Make sure OAuth client and web credentials are enabled and add all domains in your app as valid OAuth Redirect URLs.

I try to add several URI under Facebook -> Product -> Login -> Settings -> Valid OAuth Redirect URIs. I try this:

https://b2ctenant.b2clogin.com/b2ctenant.onmicrosoft.com/oauth2/authresp https://login.microsoftonline.com/b2ctenant.onmicrosoft.com/oauth2/authresp https://sitename.azurewebsites.net/.auth/login/facebook/calklback https://sitename.azurewebsite.net

I am out of idea...

like image 987
Pierre-D Savard Avatar asked Oct 11 '18 00:10

Pierre-D Savard


People also ask

Is Azure AD B2C an identity provider?

Azure AD B2C supports external identity providers like Facebook, Microsoft account, Google, Twitter, and any identity provider that supports OAuth 1.0, OAuth 2.0, OpenID Connect, and SAML protocols.

Is Azure AD B2C deprecated?

Yes. Azure Active Directory (AD) Connect and components of V1. 0 are to be deprecated and retired on and prior to August 30, 2022.

What does the Azure AD B2C service provider?

Azure AD B2C is a separate service from Azure Active Directory (Azure AD). It is built on the same technology as Azure AD but for a different purpose. It allows businesses to build customer facing applications, and then allow anyone to sign up into those applications with no restrictions on user account.

Does Azure B2C support MFA?

Azure Active Directory B2C (Azure AD B2C) integrates directly with Azure AD Multi-Factor Authentication which support following Verification methods (Email, SMS, phone call and Microsoft Authenticator app - TOTP (preview) ) so that you can add a second layer of security to sign-up and sign-in experiences in your ...


1 Answers

You can use the following domains with Azure AD B2C:

  1. your-tenant-name.b2clogin.com (recommended)
  2. login.microsoftonline.com

If you're using the your-tenant-name.b2clogin.com domain with Azure AD B2C, then the redirection URL that is registered for Azure AD B2C in Facebook must be set to:

https://your-tenant-name.b2clogin.com/your-tenant-name.onmicrosoft.com/oauth2/authresp

If you're using the login.microsoftonline.com domain with Azure AD B2C, then the redirection URL that is registered for Azure AD B2C in Facebook must be set to:

https://login.microsoftonline.com/te/your-tenant-name.onmicrosoft.com/oauth2/authresp

(Note the /te path in the redirection URL.)

like image 56
Chris Padgett Avatar answered Oct 09 '22 16:10

Chris Padgett