Skip to content

custom policy - latest changes #158

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 13 commits into
base: main
Choose a base branch
from
Open

custom policy - latest changes #158

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
5e74d4b
Add Custom policies same as current b2c user flows
pst1337 Nov 22, 2023
72655bb
DP > Change protocol to oauth2
pst1337 Nov 22, 2023
fb2c283
Add oauth2 to local accounts protocol
pst1337 Nov 22, 2023
89ff7d5
Add tenant name to local accounts template
pst1337 Nov 22, 2023
22f3ba2
Add tenant name to local accounts framework
pst1337 Nov 22, 2023
aec9f06
Revert "Add oauth2 to local accounts protocol"
pst1337 Nov 22, 2023
fa6ec76
Add Vanity Userflow XML files
pst1337 Nov 24, 2023
6dbd411
Merge pull request #1 from atende-cloud/main-dp1
pst1337 Nov 24, 2023
4c6c1ab
add vanity custom policy last changes
pst1337 Dec 11, 2023
592ea7e
custom policy: add facebok login
pst1337 Dec 11, 2023
4430ac9
fb login fix
pst1337 Dec 11, 2023
4982b46
B2c custom policy: add social link policy
pst1337 Dec 11, 2023
235d86d
B2d : add custom claims
pst1337 Dec 12, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 2 additions & 9 deletions Display Controls Starterpack/SocialAndLocalAccounts/TrustFrameworkBase.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,12 +1,5 @@
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<TrustFrameworkPolicy
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06"
PolicySchemaVersion="0.3.0.0"
TenantId="yourtenant.onmicrosoft.com"
PolicyId="B2C_1A_TrustFrameworkBase"
PublicPolicyUri="http://yourtenant.onmicrosoft.com/B2C_1A_TrustFrameworkBase">
<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="vanityb2cpoc.onmicrosoft.com" PolicyId="B2C_1A_TrustFrameworkBase" PublicPolicyUri="http://vanityb2cpoc.onmicrosoft.com/B2C_1A_TrustFrameworkBase" TenantObjectId="a374dea8-f8fe-4d08-9ef1-a61a5b4541ce">


<BuildingBlocks>
<ClaimsSchema>
Expand Down
168 changes: 168 additions & 0 deletions LocalAccounts/DP/PasswordReset.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,168 @@
<TrustFrameworkPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06" PolicySchemaVersion="0.3.0.0" TenantId="vanityb2cpoc.onmicrosoft.com" TenantObjectId="a374dea8-f8fe-4d08-9ef1-a61a5b4541ce" PolicyId="B2C_1_PasswordReset" PublicPolicyUri="http://vanityb2cpoc.onmicrosoft.com/">
<BasePolicy>
<TenantId>vanityb2cpoc.onmicrosoft.com</TenantId>
<PolicyId>base-v1</PolicyId>
</BasePolicy>
<BuildingBlocks>
<ClaimsSchema>
<ClaimType Id="newPassword">
<DataType>string</DataType>
<PredicateValidationReference Id="StrongPassword" />
</ClaimType>
<ClaimType Id="reenterPassword">
<DataType>string</DataType>
<PredicateValidationReference Id="StrongPassword" />
</ClaimType>
</ClaimsSchema>
<ContentDefinitions>
<ContentDefinition Id="api.error">
<LoadUri>~/tenant/templates/AzureBlue/exception.cshtml</LoadUri>
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:globalexception:1.2.6</DataUri>
<Metadata>
<Item Key="TemplateId">azureBlue</Item>
</Metadata>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.blockminor">
<LoadUri>~/tenant/templates/AzureBlue/selfAsserted.cshtml</LoadUri>
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:1.2.0</DataUri>
<Metadata>
<Item Key="TemplateId">azureBlue</Item>
</Metadata>
</ContentDefinition>
<ContentDefinition Id="api.idpselections.signup1.1">
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:providerselection:1.2.6</DataUri>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.localaccountlookup2.1">
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:2.1.29</DataUri>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.blockpage">
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:2.1.29</DataUri>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.localaccountpasswordchange2.1">
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:2.1.29</DataUri>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.emailverify">
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:2.1.29</DataUri>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.progressiveprofile">
<LoadUri>~/tenant/templates/AzureBlue/selfAsserted.cshtml</LoadUri>
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:1.2.0</DataUri>
<Metadata>
<Item Key="TemplateId">azureBlue</Item>
</Metadata>
</ContentDefinition>
<ContentDefinition Id="api.phonefactor1.1">
<LoadUri>~/tenant/templates/AzureBlue/multifactor-1.0.0.cshtml</LoadUri>
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:multifactor:1.2.15</DataUri>
<Metadata>
<Item Key="TemplateId">azureBlue</Item>
</Metadata>
</ContentDefinition>
<ContentDefinition Id="api.selfasserted.totp">
<DataUri>urn:com:microsoft:aad:b2c:elements:contract:selfasserted:2.1.29</DataUri>
</ContentDefinition>
</ContentDefinitions>
</BuildingBlocks>
<ClaimsProviders>
<ClaimsProvider>
<DisplayName>Azure Active Directory</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="AAD-ReadCommon">
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="cpiminternal_dateOfBirth" />
<OutputClaim ClaimTypeReferenceId="extension_Imie" />
<OutputClaim ClaimTypeReferenceId="extension_Nazwisko" />
<OutputClaim ClaimTypeReferenceId="extension_NumerTelefonu" />
</OutputClaims>
</TechnicalProfile>
</TechnicalProfiles>
</ClaimsProvider>
<ClaimsProvider>
<DisplayName>Evaluate Block User For GDPR</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="SetFeatureDefaultValue">
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="isConditionalAccessOn" DefaultValue="false" />
<OutputClaim ClaimTypeReferenceId="mfaEnabledV3" DefaultValue="false" />
<OutputClaim ClaimTypeReferenceId="mfaEnroll" DefaultValue="false" />
<OutputClaim ClaimTypeReferenceId="needToPerformMfa" DefaultValue="false" />
<OutputClaim ClaimTypeReferenceId="collectEmailOnSignUp" DefaultValue="false" />
<OutputClaim ClaimTypeReferenceId="collectEmailOnSignIn" DefaultValue="false" />
</OutputClaims>
</TechnicalProfile>
</TechnicalProfiles>
</ClaimsProvider>
<ClaimsProvider>
<DisplayName>PhoneFactor</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="EmailFactor-Common">
<EnabledForUserJourneys>Always</EnabledForUserJourneys>
</TechnicalProfile>
<TechnicalProfile Id="PhoneFactor-Common">
<EnabledForUserJourneys>OnClaimsExistence</EnabledForUserJourneys>
</TechnicalProfile>
</TechnicalProfiles>
</ClaimsProvider>
<ClaimsProvider>
<DisplayName>Self Asserted</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="SelfAsserted-Input">
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="cpiminternal_dateOfBirth" />
<OutputClaim ClaimTypeReferenceId="extension_Imie" />
<OutputClaim ClaimTypeReferenceId="extension_Nazwisko" />
<OutputClaim ClaimTypeReferenceId="extension_NumerTelefonu" />
</OutputClaims>
</TechnicalProfile>
</TechnicalProfiles>
</ClaimsProvider>
<ClaimsProvider>
<DisplayName>Token Issuer</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="JwtIssuer">
<Metadata>
<Item Key="token_lifetime_secs">3600</Item>
<Item Key="id_token_lifetime_secs">3600</Item>
<Item Key="refresh_token_lifetime_secs">1209600</Item>
<Item Key="rolling_refresh_token_lifetime_secs">7776000</Item>
<Item Key="IssuanceClaimPattern">AuthorityAndTenantGuid</Item>
<Item Key="AuthenticationContextReferenceClaimPattern">None</Item>
</Metadata>
</TechnicalProfile>
</TechnicalProfiles>
</ClaimsProvider>
</ClaimsProviders>
<SubJourneys>
<SubJourney Id="IdentityProviderSelection_LocalAccountDiscovery" Type="Call">
<OrchestrationSteps>
<OrchestrationStep Order="1" Type="ClaimsProviderSelection" ContentDefinitionReferenceId="api.idpselections.signup1.1">
<ClaimsProviderSelections>
<ClaimsProviderSelection TargetClaimsExchangeId="PasswordResetUsingEmailAddressExchange" />
</ClaimsProviderSelections>
</OrchestrationStep>
</OrchestrationSteps>
</SubJourney>
</SubJourneys>
<RelyingParty>
<DefaultUserJourney ReferenceId="B2CPasswordReset_V3" />
<UserJourneyBehaviors>
<SessionExpiryType>Rolling</SessionExpiryType>
<SessionExpiryInSeconds>86400</SessionExpiryInSeconds>
</UserJourneyBehaviors>
<TechnicalProfile Id="PolicyProfile">
<DisplayName>PolicyProfile</DisplayName>
<Protocol Name="OAuth2" />
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="cpiminternal_dateOfBirth" />
<OutputClaim ClaimTypeReferenceId="extension_Imie" />
<OutputClaim ClaimTypeReferenceId="extension_Nazwisko" />
<OutputClaim ClaimTypeReferenceId="extension_NumerTelefonu" />
<OutputClaim ClaimTypeReferenceId="objectId" />
<OutputClaim ClaimTypeReferenceId="objectId" PartnerClaimType="sub" />
<OutputClaim ClaimTypeReferenceId="emails" />
<OutputClaim ClaimTypeReferenceId="trustFrameworkPolicy" Required="true" DefaultValue="{policy}" />
</OutputClaims>
<SubjectNamingInfo ClaimType="sub" />
</TechnicalProfile>
</RelyingParty>
</TrustFrameworkPolicy>
Loading