Programmatic (API calls) User Authentication using Azure AD B2C instead of login.microsoftoneline.com form

Question

New to Azure AD... So please don't be too harsh if this is off target. :-)

Technology Stack - Latest Angular 2 with C# Middle tier and latest .Net Framework.

Ideally, What we want to do is use Azure AD B2C to store user credentials and to do the authentication - but we want our 'own' forms on our site to do the login Forms capture and logging - then pass the credentials through an API (REST?) Call (using MS Graph SDK?) to Azure AD B2C and then check the call return for the Authorization content message.

Couple of reasons - control of the application flow, Logging and the "flickering of the URL" (i.e. going from our site URL to login.microsoft... URL and then back to our sites URL).

Is this doable without doing a hack?

Thank you in advance for your help and patience!

Answer 1

You are looking for the "Resource Owner Password Credentials".

This is not currently supported for Azure AD B2C, but you can give user feedback to the B2C team that you want this through the Azure Feedback Forum: Add support for Resource Owner Password Credentials flow in Azure AD B2C and headless authentication in Microsoft Authentication Library

You should also see updates at that location if and when they implement this feature.