Skip to content

Commit 2d8c64b

Browse files
authored
Merge pull request #184700 from yoelhor/patch-224
Update claim-resolver-overview.md
2 parents baf557b + d8453a3 commit 2d8c64b

File tree

1 file changed

+25
-3
lines changed

1 file changed

+25
-3
lines changed

articles/active-directory-b2c/claim-resolver-overview.md

Lines changed: 25 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: CelesteDG
99
ms.service: active-directory
1010
ms.workload: identity
1111
ms.topic: reference
12-
ms.date: 12/12/2021
12+
ms.date: 1/11/2022
1313
ms.author: kengaderdus
1414
ms.subservice: B2C
1515
---
@@ -133,8 +133,30 @@ The following table lists the [OAuth2 identity provider](oauth2-technical-profil
133133

134134
| Claim | Description | Example |
135135
| ----- | ----------------------- | --------|
136-
| {oauth2:access_token} | The access token. | N/A |
137-
| {oauth2:refresh_token} | The refresh token. | N/A |
136+
| {oauth2:access_token} | The OAuth2 identity provider access token. The `access_token` attribute. | `eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1Ni...` |
137+
| {oauth2:token_type} | The type of the access token. The `token_type` attribute. | Bearer |
138+
| {oauth2:expires_in} | The length of time that the access token is valid in seconds. The `expires_in` attribute. The output claim [DataType](claimsschema.md#datatype) must be `int` or `long`. | 960000 |
139+
| {oauth2:refresh_token} | The OAuth2 identity provider refresh token. The `refresh_token` attribute. | `eyJraWQiOiJacW9pQlp2TW5pYVc2MUY...` |
140+
141+
To use the OAuth2 identity provider claim resolvers, set the output claim's `PartnerClaimType` attribute to the claim resolver. The following example demonstrates how the get the external identity provider claims:
142+
143+
```xml
144+
<ClaimsProvider>
145+
<DisplayName>Contoso</DisplayName>
146+
<TechnicalProfiles>
147+
<TechnicalProfile Id="Contoso-OAUTH">
148+
<OutputClaims>
149+
<OutputClaim ClaimTypeReferenceId="identityProviderAccessToken" PartnerClaimType="{oauth2:access_token}" />
150+
<OutputClaim ClaimTypeReferenceId="identityProviderAccessTokenType" PartnerClaimType="{oauth2:token_type}" />
151+
<OutputClaim ClaimTypeReferenceId="identityProviderAccessTokenExpiresIn" PartnerClaimType="{oauth2:expires_in}" />
152+
<OutputClaim ClaimTypeReferenceId="identityProviderRefreshToken" PartnerClaimType="{oauth2:refresh_token}" />
153+
</OutputClaims>
154+
...
155+
</TechnicalProfile>
156+
</TechnicalProfiles>
157+
</ClaimsProvider>
158+
```
159+
138160

139161
## Using claim resolvers
140162

0 commit comments

Comments
 (0)