Set value of input claim based on other input claim that uses claimresolvers in Azure B2C Custom policies

user_13974177 0
Viewed 446

I have the below two input claims

<InputClaim ClaimTypeReferenceId="isAccessFlow" DefaultValue="{OAUTH-KV:access_flow}" AlwaysUseDefaultValue="true"/>
<InputClaim ClaimTypeReferenceId="prompt"  DefaultValue="select_account"/>

I want to assign the value for 'prompt' input claim as 'select_account' only when the isAccessFlow value is not true. I am unable to figure out how to write input claim transformations in this case to achieve the intended requirement.

azure-ad-b2c azure
1 Answers

Claim Types

 <ClaimType Id="isAccessFlow">
    <DisplayName>Access Flow</DisplayName>
    <DataType>string</DataType>
  </ClaimType>
  <ClaimType Id="prompt">
    <DisplayName>prompt</DisplayName>
    <DataType>string</DataType>
  </ClaimType>

Technical Profiles

<TechnicalProfile Id="ParseAccessFlow">
    <DisplayName>Access Flow</DisplayName>
    <Protocol Name="Proprietary" Handler="Web.TPEngine.Providers.ClaimsTransformationProtocolProvider,Web.TPEngine, Version=1.0.0.0,
     Culture=neutral, PublicKeyToken=null" />
    <Metadata>
    <Item Key="IncludeClaimResolvingInClaimsHandling">true</Item>
    </Metadata>
    <InputClaims>
    <InputClaim ClaimTypeReferenceId="isAccessFlow" DefaultValue="{OAUTH-KV:data_flow}" AlwaysUseDefaultValue="true"/>
    </InputClaims>
    <OutputClaims>
    <OutputClaim ClaimTypeReferenceId="isAccessFlow" />
    </OutputClaims>
    <OutputClaimsTransformations>
    <OutputClaimsTransformation ReferenceId="AssignedAccessFlowValue" />
    <OutputClaimsTransformation ReferenceId="ChangeToLower" />
    </OutputClaimsTransformations>
    <UseTechnicalProfileForSessionManagement ReferenceId="SM-Noop" />
    </TechnicalProfile>
    <TechnicalProfile Id="PromptFlow">
      <DisplayName>Prompt</DisplayName>
      <Protocol Name="Proprietary" Handler="Web.TPEngine.Providers.ClaimsTransformationProtocolProvider,Web.TPEngine, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" />
    <InputClaimsTransformations>
      <InputClaimsTransformation ReferenceId="AssignedDefaultValue" />          
      </InputClaimsTransformations>
      <InputClaims>
        <InputClaim ClaimTypeReferenceId="prompt"  />
      </InputClaims>
      <OutputClaims>
        <OutputClaim ClaimTypeReferenceId="prompt"/>
      </OutputClaims>
    </TechnicalProfile>

ClaimsTransformations

<ClaimsTransformation Id="AssignedAccessFlowValue" TransformationMethod="FormatStringClaim">
    <InputClaims>
      <InputClaim ClaimTypeReferenceId="isAccessFlow" TransformationClaimType="inputClaim" />
    </InputClaims>
    <InputParameters>
      <InputParameter Id="stringFormat" DataType="string" Value="{0}" />
    </InputParameters>
    <OutputClaims>
      <OutputClaim ClaimTypeReferenceId="isAccessFlow" TransformationClaimType="outputClaim" />
    </OutputClaims>
  </ClaimsTransformation>
  <ClaimsTransformation Id="ChangeToLower" TransformationMethod="ChangeCase">
    <InputClaims>
      <InputClaim ClaimTypeReferenceId="isAccessFlow" TransformationClaimType="inputClaim1" />
    </InputClaims>
    <InputParameters>
      <InputParameter Id="toCase" DataType="string" Value="LOWER" />
    </InputParameters>
    <OutputClaims>
      <OutputClaim ClaimTypeReferenceId="isAccessFlow" TransformationClaimType="outputClaim" />
    </OutputClaims>
  </ClaimsTransformation>      
  <ClaimsTransformation Id="AssignedDefaultValue" TransformationMethod="CreateStringClaim">
    <InputParameters>
      <InputParameter Id="value" DataType="string" Value="select_account" />
    </InputParameters>
    <OutputClaims>
      <OutputClaim ClaimTypeReferenceId="prompt" TransformationClaimType="createdClaim" />
    </OutputClaims>
  </ClaimsTransformation>

User Journey

<UserJourney Id="PromptCheck">
  <OrchestrationSteps>
    <OrchestrationStep Order="1" Type="ClaimsExchange">
      <ClaimsExchanges>
        <ClaimsExchange Id="AccessFlow" TechnicalProfileReferenceId="ParseAccessFlow" />
      </ClaimsExchanges>
    </OrchestrationStep>
    <OrchestrationStep Order="2" Type="ClaimsExchange">
    <Preconditions>
        <Precondition Type="ClaimEquals" ExecuteActionsIf="true">
          <Value>isAccessFlow</Value>
          <Value>true</Value>
          <Action>SkipThisOrchestrationStep</Action>
        </Precondition>
      </Preconditions>
      <ClaimsExchanges>
        <ClaimsExchange Id="Assigned" TechnicalProfileReferenceId="PromptFlow" />
      </ClaimsExchanges>
    </OrchestrationStep>
    <OrchestrationStep Order="3" Type="SendClaims" CpimIssuerTechnicalProfileReferenceId="JwtIssuer" />
  </OrchestrationSteps>
  <ClientDefinition ReferenceId="DefaultWeb" />
</UserJourney>
user_139426370
Related