Forum Discussion
Ian_Morrish
Mar 09, 2022Brass Contributor
Azure B2C oidc authentication with SPSE failed
My AuthorizationEndpoint is defined in SP as "https://tenantName.b2clogin.com/tenantName.onmicrosoft.com/oauth2/v2.0/authorize?p=b2c_1a_signup_signin" But when SP redirects, it drops the p=b2c...
Ian_Morrish
Mar 10, 2022Brass Contributor
Think I found my problem, should be using OpenID connect format, not OAuth2. Very subtle difference where the flow name goes.
GET https://{tenant}.b2clogin.com/{tenant}.onmicrosoft.com/{policy}/oauth2/v2.0/authorize?
GET https://{tenant}.b2clogin.com/{tenant}.onmicrosoft.com/{policy}/oauth2/v2.0/authorize?
- Steve ZhangMar 11, 2022
Microsoft
Thank you Ian for trying on OIDC in SPSE. Good to know that you sorted out the problem.
Please let us know if you have further problem or suggestion regarding SharePoint Server authentication.- Ian_MorrishMar 26, 2022Brass ContributorHmmm, still didn't work because SharePoint adds ?Source=/ to the redirect_uri which B2C apps don’t allow (Azure AD does allow and sample guide for configuring OIDC in Azure AD shows modifying the manafest to allow /* which is blocked in B2C).
URL Rewrite to the rescue. Handling the Password Rest flow from B2C is a little more tricky.- Steve ZhangMar 26, 2022
Microsoft
Ian_Morrish Is there any more detail about the error you are facing?
The detail of your configurations and also the ULS Log?
Steve