admin管理员组

文章数量:1316818

This is the problem:

The user SSO using an external IdP, but after that I go to his account to see that it's disabled. Why?

This is the line where the account is created:

 <ClaimsExchange Id="AADUserWrite" TechnicalProfileReferenceId="AAD-UserWriteUsingAlternativeSecurityId" />

The only thing that has been modified is the following:

 <TechnicalProfile Id="AAD-UserWriteUsingAlternativeSecurityId">
           <PersistedClaims>
              <PersistedClaim ClaimTypeReferenceId="accountEnabled" AlwaysUseDefaultValue="true" DefaultValue="true" />
           </PersistedClaims>
        </TechnicalProfile>
     </TechnicalProfiles>

which is in the technical profile file, but even with this it's disabled

This is the problem:

The user SSO using an external IdP, but after that I go to his account to see that it's disabled. Why?

This is the line where the account is created:

 <ClaimsExchange Id="AADUserWrite" TechnicalProfileReferenceId="AAD-UserWriteUsingAlternativeSecurityId" />

The only thing that has been modified is the following:

 <TechnicalProfile Id="AAD-UserWriteUsingAlternativeSecurityId">
           <PersistedClaims>
              <PersistedClaim ClaimTypeReferenceId="accountEnabled" AlwaysUseDefaultValue="true" DefaultValue="true" />
           </PersistedClaims>
        </TechnicalProfile>
     </TechnicalProfiles>

which is in the technical profile file, but even with this it's disabled

  • azure
  • authentication
  • azure-ad-b2c
  • azure-ad-b2c-custom-policy
Share Improve this question asked yesterday IriaAMIriaAM 254 bronze badges
Add a comment  | 

1 Answer 1

Reset to default 0

This is because a federated account in B2C is a "shadow account".

It uses AlternativeSecurityId to access rather than a local account objectID.

The account is "disabled" in B2C because you can't log in to that account locally.

You have to go via a federation login.

本文标签： azureuser signs up using external Idp but the account is created disabledwhyStack Overflow

版权声明：本文标题：azure - user signs up using external Idp but the account is created disabled, why? - Stack Overflow 内容由网友自发贡献，该文观点仅代表作者本人， 转载请联系作者并注明出处：http://www.betaflare.com/web/1738174520a2067192.html， 本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容，一经查实，本站将立刻删除。