Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

In Azure AD B2C, Should the ACR or TFP Claim Have the Policy Name?

Tags:

azure-ad-b2c

According to this documentation, the Policy Name should be in the TFP (Trust Framework Policy) claim but it is showing up in the ACR claim. I started with the Starter Pack

enter image description here


ID Token w/ ACR Claim containing the Policy Name

id token w/ acr claim


Also, further down in the documentation it says the ACR is where the Policy Name will be:

acr documentation

Related SO Post

like image 420
spottedmahn Avatar asked Jan 30 '23 10:01

spottedmahn


1 Answers

It is recommended you issue the policy ID in the "tfp" claim. If you are creating custom policies, then you can issue this by configuring the "JwtIssuer" technical profile. You can learn more about this at here.

like image 117
Chris Padgett Avatar answered Feb 01 '23 00:02

Chris Padgett