You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/claimsschema.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ manager: celestedg
8
8
ms.service: active-directory
9
9
ms.workload: identity
10
10
ms.topic: reference
11
-
ms.date: 02/17/2020
11
+
ms.date: 02/24/2020
12
12
ms.author: marsma
13
13
ms.subservice: B2C
14
14
---
@@ -171,6 +171,8 @@ The **Restriction** element contains the following elements:
171
171
172
172
#### Enumeration
173
173
174
+
The **Enumeration** element defines available options for the user to select for a claim in the user interface, such as a value in a `CheckboxMultiSelect`, `DropdownSingleSelect`, or `RadioSingleSelect`. Alternatively, you can define and localize available options with [LocalizedCollections](localization.md#localizedcollections) element. To look up an item from a claim **Enumeration** collection, use [GetMappedValueFromLocalizedCollection](string-transformations.md#getmappedvaluefromlocalizedcollection) claims transformation.
175
+
174
176
The **Enumeration** element contains the following attributes:
175
177
176
178
| Attribute | Required | Description |
@@ -243,7 +245,7 @@ The **UserInputType** element available user input types:
243
245
|Paragraph |`boolean`, `date`, `dateTime`, `duration`, `int`, `long`, `string`|A field that shows text only in a paragraph tag. |
244
246
|Password |`string`|Password text box.|
245
247
|RadioSingleSelect |`string`| Collection of radio buttons. The claim value is the selected value.|
|TextBox |`boolean`, `int`, `string`|Single-line text box. |
248
250
249
251
@@ -403,5 +405,3 @@ The **Paragraph** user input type is used to provide a field that shows text onl
403
405
</Restriction>
404
406
</ClaimType>
405
407
```
406
-
407
-
To display one of the **Enumeration** values in a **responseMsg** claim, use `GetMappedValueFromLocalizedCollection` or `CreateStringClaim` claims transformation. For more information, see [String Claims Transformations](string-transformations.md)
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/oauth2-technical-profile.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ manager: celestedg
9
9
ms.service: active-directory
10
10
ms.workload: identity
11
11
ms.topic: reference
12
-
ms.date: 02/13/2020
12
+
ms.date: 02/24/2020
13
13
ms.author: marsma
14
14
ms.subservice: B2C
15
15
---
@@ -93,6 +93,7 @@ The technical profile also returns claims that aren't returned by the identity p
93
93
| ExtraParamsInAccessTokenEndpointResponse | No | Contains the extra parameters that can be returned in the response from **AccessTokenEndpoint** by some identity providers. For example, the response from **AccessTokenEndpoint** contains an extra parameter such as `openid`, which is a mandatory parameter besides the access_token in a **ClaimsEndpoint** request query string. Multiple parameter names should be escaped and separated by the comma ',' delimiter. |
94
94
| ExtraParamsInClaimsEndpointRequest | No | Contains the extra parameters that can be returned in the **ClaimsEndpoint** request by some identity providers. Multiple parameter names should be escaped and separated by the comma ',' delimiter. |
95
95
| IncludeClaimResolvingInClaimsHandling | No | For input and output claims, specifies whether [claims resolution](claim-resolver-overview.md) is included in the technical profile. Possible values: `true`, or `false` (default). If you want to use a claims resolver in the technical profile, set this to `true`. |
96
+
| ResolveJsonPathsInJsonTokens | No | Indicates whether the technical profile resolves JSON paths. Possible values: `true`, or `false` (default). Use this metadata to read data from a nested JSON element. In an [OutputClaim](technicalprofiles.md#outputclaims), set the `PartnerClaimType` to the JSON path element you want to output. For example: `firstName.localized`, or `data.0.to.0.email`.|
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/predicates.md
+19-30Lines changed: 19 additions & 30 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ manager: celestedg
9
9
ms.service: active-directory
10
10
ms.workload: identity
11
11
ms.topic: reference
12
-
ms.date: 10/28/2019
12
+
ms.date: 02/24/2020
13
13
ms.author: marsma
14
14
ms.subservice: B2C
15
15
---
@@ -42,12 +42,13 @@ The **Predicate** element contains the following attributes:
42
42
| --------- | -------- | ----------- |
43
43
| Id | Yes | An identifier that's used for the predicate. Other elements can use this identifier in the policy. |
44
44
| Method | Yes | The method type to use for validation. Possible values: **IsLengthRange**, **MatchesRegex**, **IncludesCharacters**, or **IsDateRange**. The **IsLengthRange** value checks whether the length of a string claim value is within the range of minimum and maximum parameters specified. The **MatchesRegex** value checks whether a string claim value matches a regular expression. The **IncludesCharacters** value checks whether a string claim value contains a character set. The **IsDateRange** value checks whether a date claim value is between a range of minimum and maximum parameters specified. |
45
+
| HelpText | No | An error message for users if the check fails. This string can be localized using the [language customization](localization.md)|
45
46
46
47
The **Predicate** element contains the following elements:
47
48
48
49
| Element | Occurrences | Description |
49
50
| ------- | ----------- | ----------- |
50
-
| UserHelpText |1:1 | An error message for users if the check fails. This string can be localized using the [language customization](localization.md)|
51
+
| UserHelpText |0:1 |(Deprecated) An error message for users if the check fails. |
51
52
| Parameters | 1:1 | The parameters for the method type of the string validation. |
52
53
53
54
The **Parameters** element contains the following elements:
@@ -65,20 +66,18 @@ The **Parameter** element contains the following attributes:
65
66
The following example shows a `IsLengthRange` method with the parameters `Minimum` and `Maximum` that specify the length range of the string:
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/relyingparty.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ manager: celestedg
8
8
ms.service: active-directory
9
9
ms.workload: identity
10
10
ms.topic: reference
11
-
ms.date: 02/02/2020
11
+
ms.date: 02/24/2020
12
12
ms.author: marsma
13
13
ms.subservice: B2C
14
14
---
@@ -113,6 +113,7 @@ The **UserJourneyBehaviors** element contains the following elements:
113
113
| SessionExpiryInSeconds | 0:1 | The lifetime of Azure AD B2C's session cookie specified as an integer stored on the user's browser upon successful authentication. |
114
114
| JourneyInsights | 0:1 | The Azure Application Insights instrumentation key to be used. |
115
115
| ContentDefinitionParameters | 0:1 | The list of key value pairs to be appended to the content definition load URI. |
116
+
|ScriptExecution| 0:1| The supported [JavaScript](javascript-samples.md) execution modes. Possible values: `Allow` or `Disallow` (default).
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/restful-technical-profile.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ manager: celestedg
9
9
ms.service: active-directory
10
10
ms.workload: identity
11
11
ms.topic: reference
12
-
ms.date: 02/13/2020
12
+
ms.date: 02/24/2020
13
13
ms.author: marsma
14
14
ms.subservice: B2C
15
15
---
@@ -127,6 +127,7 @@ The technical profile also returns claims, that aren't returned by the identity
127
127
| ClaimUsedForRequestPayload| No | Name of a string claim that contains the payload to be sent to the REST API. |
128
128
| DebugMode | No | Runs the technical profile in debug mode. Possible values: `true`, or `false` (default). In debug mode, the REST API can return more information. See the [Returning error message](#returning-error-message) section. |
129
129
| IncludeClaimResolvingInClaimsHandling | No | For input and output claims, specifies whether [claims resolution](claim-resolver-overview.md) is included in the technical profile. Possible values: `true`, or `false` (default). If you want to use a claims resolver in the technical profile, set this to `true`. |
130
+
| ResolveJsonPathsInJsonTokens | No | Indicates whether the technical profile resolves JSON paths. Possible values: `true`, or `false` (default). Use this metadata to read data from a nested JSON element. In an [OutputClaim](technicalprofiles.md#outputclaims), set the `PartnerClaimType` to the JSON path element you want to output. For example: `firstName.localized`, or `data.0.to.0.email`.|
| InputParameter | value | string | The string to be set |
126
+
| InputParameter | value | string | The string to be set. This input parameter supports [string claims transformation expressions](string-transformations.md#string-claim-transformations-expressions).|
127
127
| OutputClaim | createdClaim | string | The ClaimType that is produced after this claims transformation has been invoked, with the value specified in the input parameter. |
128
128
129
129
Use this claims transformation to set a string ClaimType value.
@@ -293,7 +293,7 @@ Format a claim according to the provided format string. This transformation uses
293
293
| Item | TransformationClaimType | Data Type | Notes |
| InputClaim | inputClaim |string |The ClaimType that acts as string format {0} parameter. |
296
-
| InputParameter | stringFormat | string | The string format, including the {0} parameter. |
296
+
| InputParameter | stringFormat | string | The string format, including the {0} parameter. This input parameter supports [string claims transformation expressions](string-transformations.md#string-claim-transformations-expressions). |
297
297
| OutputClaim | outputClaim | string | The ClaimType that is produced after this claims transformation has been invoked. |
298
298
299
299
Use this claims transformation to format any string with one parameter {0}. The following example creates a **userPrincipalName**. All social identity provider technical profiles, such as `Facebook-OAUTH` calls the **CreateUserPrincipalName** to generate a **userPrincipalName**.
@@ -329,7 +329,7 @@ Format two claims according to the provided format string. This transformation u
| InputClaim | inputClaim |string | The ClaimType that acts as string format {0} parameter. |
331
331
| InputClaim | inputClaim | string | The ClaimType that acts as string format {1} parameter. |
332
-
| InputParameter | stringFormat | string | The string format, including the {0} and {1} parameters. |
332
+
| InputParameter | stringFormat | string | The string format, including the {0} and {1} parameters. This input parameter supports [string claims transformation expressions](string-transformations.md#string-claim-transformations-expressions). |
333
333
| OutputClaim | outputClaim | string | The ClaimType that is produced after this claims transformation has been invoked. |
334
334
335
335
Use this claims transformation to format any string with two parameters, {0} and {1}. The following example creates a **displayName** with the specified format:
@@ -921,3 +921,12 @@ The following example takes a comma delimiter string of user roles, and converts
921
921
-**delimiter**: ","
922
922
- Output claims:
923
923
-**outputClaim**: [ "Admin", "Author", "Reader" ]
924
+
925
+
## String claim transformations expressions
926
+
Claim transformations expressions in Azure AD B2C custom policies provide context information about the tenant ID and technical profile ID.
927
+
928
+
| Expression | Description | Example |
929
+
| ----- | ----------- | --------|
930
+
|`{TechnicalProfileId}`| The technical profileId name. | Facebook-OAUTH |
931
+
|`{RelyingPartyTenantId}`| The tenant ID of the relying party policy. | your-tenant.onmicrosoft.com |
932
+
|`{TrustFrameworkTenantId}`| The tenant ID of the trust framework. | your-tenant.onmicrosoft.com |
0 commit comments