Programmatic (API calls) User Authentication using Azure AD B2C instead of login.microsoftoneline.com form

user_8378342 0
Viewed 2002

New to Azure AD... So please don't be too harsh if this is off target. :-)

Technology Stack - Latest Angular 2 with C# Middle tier and latest .Net Framework.

Ideally, What we want to do is use Azure AD B2C to store user credentials and to do the authentication - but we want our 'own' forms on our site to do the login Forms capture and logging - then pass the credentials through an API (REST?) Call (using MS Graph SDK?) to Azure AD B2C and then check the call return for the Authorization content message.

Couple of reasons - control of the application flow, Logging and the "flickering of the URL" (i.e. going from our site URL to login.microsoft... URL and then back to our sites URL).

Is this doable without doing a hack?

Thank you in advance for your help and patience!

azure-ad-b2c azure-active-directory
3 Answers

The resource owner password credentials flow is now in preview.

In Azure Active Directory (Azure AD) B2C, the following options are supported:

Native Client: User interaction during authentication happens when code runs on a user-side device. The device can be a mobile application that's running in a native operating system, such as Android, or running in a browser, such as JavaScript.

Public client flow: Only user credentials, gathered by an application, are sent in the API call. The credentials of the application are not sent.

Add new claims: The ID token contents can be changed to add new claims.

The following flows are not supported:

Server-to-server: The identity protection system needs a reliable IP address gathered from the caller (the native client) as part of the interaction. In a server-side API call, only the server’s IP address is used. If a dynamic threshold of failed authentications is exceeded, the identity protection system may identify a repeated IP address as an attacker.

Confidential client flow: The application client ID is validated, but the application secret is not validated.

From here.

user_24762600
Related