Bypassing Email Verification within Azure AD B2C during Signup Signin on Mobile app

Question

I hope I'm clear with my question so here goes. On the sign up flow of our app we ask the user for username, email and password. However we're not requiring a user's email to be confirmed/validated to continue to use the app. Per our IT dept - Azure AD B2C requires the email address to be verified during the first time signup when by the end user. Is this an absolute truth? Other apps require email, but will still let the user utilize services without confirmation.

We understand the risk and are putting onus on the user if they decide to use an email they don't own. Details of this scenario will be detailed in the legal disclosure. So resetting passwords, notifications etc. won't work for this user.

Answer 1

This is now possible. From the Azure AD B2C Documentation

• Click Sign-up policies or Sign-up or sign-in policies depending on what you configured for sign-up.
• Click your policy (for example, "B2C_1_SiUp") to open it. Click Edit at the top of the blade.
• Click Page UI Customization.
• Click Local account sign-up page.
• Click Email Address in the Name column under the Sign-up attributes section.
• Toggle the Require verification option to No.
• Click OK at the bottom until you reach the Edit policy blade.
• Click Save at the top of the blade. You're done!

Answer 2

It would be nice if we could turn off email verification. I think there's a lot of things that would be nice to configure in the policies, but we currently can't.

For now, you will have to write your own signup flow with custom HTML/JavaScript and backend API/services, and then have your backend create the account using the B2C Graph API.