Hello everyone:
We’re using the MS Graph API /users endpoint to query user accounts in our Azure B2C tenant.
The $filter parameter doesn’t seem to filter Users correctly when filtering on the issuer property in the identities collection (used in identities/any(x:x/issuer)- the supplied issuer string value is ignored.
Here’s an example of a query where the endpoint returned results matching the email address in issuerAssignedId even though the filter’s identities/issuer filter value contained only a whitespace character:
Request
GET https://graph.microsoft.com/v1.0/users?$select=id,displayName,identities&$top=999&$filter=identities... eq 'myusername@mycompany.onmicrosoft.com' and x/issuer eq ' ')
Response
{
"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users(id,displayName,identities)",
"value": [
{
"id": "e2349f30-7778-4e60-86f6-254096886f84",
"displayName": "trusted-user",
"identities": [
{
"signInType": "emailAddress",
"issuer": "myb2cissuer.onmicrosoft.com",
"issuerAssignedId": "myusername@mycompany.onmicrosoft.com"
},
{
"signInType": "userPrincipalName",
"issuer": "myb2cissuer.onmicrosoft.com",
"issuerAssignedId": "e2349f30-7778-4e60-86f6-254096886f84@myb2cissuer.onmicrosoft.com"
}
]
}
]
}
I understand that this form of query filter expression on the User’s identities collection requires that both issuer and issuerAssignedId are specified.
@FaithOmbongi (MS Graph Docs on Github) mentioned that this is caused by a known bug but didn’t include any reference to the bug, or tracking details, nor any indication of when it will be resolved:
“This is a known bug currently in Engineering's queue for resolution. Closing this issue for now.“
- @FaithOmbongi - from: $filter is not working properly for user identities · Issue #11094 · microsoftgraph/microsoft-graph-docs ( github.com)
Could we please receive some info/feedback on this issue? This is a blocking issue for us.
Is it still a confirmed bug or are we calling the MS Graph API incorrectly?
BTW Apologies if I've asked this question in the wrong forum.
Also, this same issue has been raised elsewhere but it still remains unanswered:
https://techcommunity.microsoft.com/t5/microsoft-graph/microsoft-graph-filtering-on-identities/m-p/1...
https://github.com/microsoftgraph/microsoft-graph-docs/issues/11094
https://stackoverflow.com/questions/65209716/is-issuer-both-required-and-ignored-when-querying-users...
UPDATE: BTW If anyone is interested in following a related discussion on the MS Q&A forum, please see: https://docs.microsoft.com/en-us/answers/questions/826199/user-query-filter-ignores-identitiesissuer...
