Skip to content

Commit 5307e40

Browse files
committed
Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)
2 parents b11a519 + 7373c3c commit 5307e40

File tree

658 files changed

+6164
-2297
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

658 files changed

+6164
-2297
lines changed

articles/active-directory-b2c/boolean-transformations.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: CelesteDG
99
ms.service: active-directory
1010
ms.workload: identity
1111
ms.topic: reference
12-
ms.date: 01/17/2022
12+
ms.date: 02/16/2022
1313
ms.author: kengaderdus
1414
ms.subservice: B2C
1515
---
@@ -20,7 +20,7 @@ This article provides examples for using the boolean claims transformations of t
2020

2121
## AndClaims
2222

23-
Computes an `And` operation of two boolean input claims, and sets the output claim with result of the operation.
23+
Computes an `And` operation of two boolean input claims, and sets the output claim with result of the operation. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/boolean#andclaims) of this claims transformation.
2424

2525
| Element | TransformationClaimType | Data Type | Notes |
2626
|-------| ------------------------ | ---------- | ----- |
@@ -54,7 +54,7 @@ The following claims transformation demonstrates how to `And` two boolean claims
5454

5555
## AssertBooleanClaimIsEqualToValue
5656

57-
Checks that boolean values of two claims are equal, and throws an exception if they are not.
57+
Checks that boolean values of two claims are equal, and throws an exception if they aren't. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/boolean#assertbooleanclaimisequaltovalue) of this claims transformation.
5858

5959
| Element | TransformationClaimType | Data Type | Notes |
6060
| ---- | ------------------------ | ---------- | ----- |
@@ -63,7 +63,7 @@ Checks that boolean values of two claims are equal, and throws an exception if t
6363

6464
The **AssertBooleanClaimIsEqualToValue** claims transformation is always executed from a [validation technical profile](validation-technical-profile.md) that is called by a [self-asserted technical profile](self-asserted-technical-profile.md). The **UserMessageIfClaimsTransformationBooleanValueIsNotEqual** self-asserted technical profile metadata controls the error message that the technical profile presents to the user. The error messages can be [localized](localization-string-ids.md#claims-transformations-error-messages).
6565

66-
![AssertStringClaimsAreEqual execution](./media/boolean-transformations/assert-execution.png)
66+
![Diagram shows how to use the AssertStringClaimsAreEqual claims transformation.](./media/boolean-transformations/assert-execution.png)
6767

6868
### Example of AssertBooleanClaimIsEqualToValue
6969

@@ -122,7 +122,7 @@ The self-asserted technical profile calls the validation `Example-AssertBoolean`
122122

123123
## CompareBooleanClaimToValue
124124

125-
Checks that boolean value of a claim is equal to `true` or `false`, and return the result of the compression.
125+
Checks that boolean value of a claim is equal to `true` or `false`, and return the result of the compression. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/boolean#comparebooleanclaimtovalue) of this claims transformation.
126126

127127
| Element | TransformationClaimType | Data Type | Notes |
128128
| ---- | ------------------------ | ---------- | ----- |
@@ -157,7 +157,7 @@ The following claims transformation demonstrates how to check the value of a boo
157157

158158
## NotClaims
159159

160-
Computes a `Not` operation of the boolean input claim and sets the output claim with result of the operation.
160+
Computes a `Not` operation of the boolean input claim and sets the output claim with result of the operation. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/boolean#notclaims) of this claims transformation.
161161

162162
| Element | TransformationClaimType | Data Type | Notes |
163163
| ---- | ----------------------- | --------- | ----- |
@@ -186,7 +186,7 @@ The following claims transformation demonstrates how to perform logical negation
186186

187187
## OrClaims
188188

189-
Computes an `Or` of two boolean claims and sets the output claim with result of the operation.
189+
Computes an `Or` of two boolean claims and sets the output claim with result of the operation. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/boolean#orclaims) of this claims transformation.
190190

191191
| Element | TransformationClaimType | Data Type | Notes |
192192
| ---- | ----------------------- | --------- | ----- |
@@ -218,4 +218,4 @@ The following claims transformation demonstrates how to `Or` two boolean claims.
218218

219219
## Next steps
220220

221-
- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation) on the Azure AD B2C community GitHub repo
221+
- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/boolean) on the Azure AD B2C community GitHub repo

articles/active-directory-b2c/claim-resolver-overview.md

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: CelesteDG
99
ms.service: active-directory
1010
ms.workload: identity
1111
ms.topic: reference
12-
ms.date: 1/11/2022
12+
ms.date: 02/16/2022
1313
ms.author: kengaderdus
1414
ms.subservice: B2C
1515
---
@@ -47,6 +47,8 @@ The following table lists the claim resolvers with information about the languag
4747
| {Culture:RegionName} | The two letter ISO code for the region. | US |
4848
| {Culture:RFC5646} | The RFC5646 language code. | en-US |
4949

50+
Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-resolver#culture) of the culture claim resolvers.
51+
5052
## Policy
5153

5254
The following table lists the claim resolvers with information about the policy used in the authorization request:
@@ -58,6 +60,7 @@ The following table lists the claim resolvers with information about the policy
5860
| {Policy:TenantObjectId} | The tenant object ID of the relying party policy. | 00000000-0000-0000-0000-000000000000 |
5961
| {Policy:TrustFrameworkTenantId} | The tenant ID of the trust framework. | your-tenant.onmicrosoft.com |
6062

63+
Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-resolver#policy) of the policy claim resolvers.
6164

6265
## Context
6366

@@ -73,6 +76,8 @@ The following table lists the contextual claim resolvers of the authorization re
7376
| {Context:IPAddress} | The user IP address. | 11.111.111.11 |
7477
| {Context:KMSI} | Indicates whether [Keep me signed in](session-behavior.md?pivots=b2c-custom-policy#enable-keep-me-signed-in-kmsi) checkbox is selected. | true |
7578

79+
Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-resolver#context) of the context claim resolvers.
80+
7681
## Claims
7782

7883
This section describes how to get a claim value as a claim resolver.
@@ -100,6 +105,8 @@ The following table lists the claim resolvers with information about the OpenID
100105
| {OIDC:Scope} |The `scope` query string parameter. | openid |
101106
| {OIDC:Username}| The [resource owner password credentials flow](add-ropc-policy.md) user's username.| [email protected]|
102107

108+
Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-resolver#openid-connect-relying-party-application) of the OpenID Connect claim resolvers.
109+
103110
## OAuth2 key-value parameters
104111

105112
Any parameter name included as part of an OIDC or OAuth2 request can be mapped to a claim in the user journey. For example, the request from the application might include a query string parameter with a name of `app_session`, `loyalty_number`, or any custom query string.
@@ -127,6 +134,8 @@ The following table lists the claim resolvers with information about the SAML a
127134
| {SAML:Subject} | The `Subject` from the NameId element of the SAML AuthN request.|
128135
| {SAML:Binding} | The `ProtocolBinding` attribute value, from the `AuthnRequest` element of the SAML request. | urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST |
129136

137+
Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-resolver#saml-service-provider) of the SAML claim resolvers.
138+
130139
## OAuth2 identity provider
131140

132141
The following table lists the [OAuth2 identity provider](oauth2-technical-profile.md) claim resolvers:
@@ -157,7 +166,6 @@ To use the OAuth2 identity provider claim resolvers, set the output claim's `Par
157166
</ClaimsProvider>
158167
```
159168

160-
161169
## Using claim resolvers
162170

163171
You can use claims resolvers with the following elements:
@@ -287,3 +295,7 @@ In a [Relying party](relyingparty.md) policy technical profile, you may want to
287295
</TechnicalProfile>
288296
</RelyingParty>
289297
```
298+
299+
## Next steps
300+
301+
- Find more [claims resolvers samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-resolver) on the Azure AD B2C community GitHub repo

articles/active-directory-b2c/claimsschema.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ manager: CelesteDG
88
ms.service: active-directory
99
ms.workload: identity
1010
ms.topic: reference
11-
ms.date: 03/05/2020
11+
ms.date: 02/16/2022
1212
ms.author: kengaderdus
1313
ms.subservice: B2C
1414
ms.custom: "b2c-support"
@@ -238,6 +238,8 @@ The Identity Experience Framework renders the email address claim with email for
238238

239239
Azure AD B2C supports a variety of user input types, such as a textbox, password, and dropdown list that can be used when manually entering claim data for the claim type. You must specify the **UserInputType** when you collect information from the user by using a [self-asserted technical profile](self-asserted-technical-profile.md) and [display controls](display-controls.md).
240240

241+
Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims#user-input-types) of the user input type.
242+
241243
The **UserInputType** element available user input types:
242244

243245
| UserInputType | Supported ClaimType | Description |

articles/active-directory-b2c/date-transformations.md

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ manager: CelesteDG
88
ms.service: active-directory
99
ms.workload: identity
1010
ms.topic: reference
11-
ms.date: 1/17/2022
11+
ms.date: 02/16/2022
1212
ms.author: kengaderdus
1313
ms.subservice: B2C
1414
ms.custom: "b2c-support"
@@ -20,7 +20,7 @@ This article provides examples for using the date claims transformations of the
2020

2121
## AssertDateTimeIsGreaterThan
2222

23-
Asserts that one date is later than a second date. Determines whether the `rightOperand` is greater than the `leftOperand`. If yes, throws an exception.
23+
Asserts that one date is later than a second date. Determines whether the `rightOperand` is greater than the `leftOperand`. If yes, throws an exception. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date#assertdatetimeisgreaterthan) of this claims transformation.
2424

2525
| Element | TransformationClaimType | Data Type | Notes |
2626
| ---- | ----------------------- | --------- | ----- |
@@ -32,7 +32,7 @@ Asserts that one date is later than a second date. Determines whether the `right
3232

3333
The **AssertDateTimeIsGreaterThan** claims transformation is always executed from a [validation technical profile](validation-technical-profile.md) that is called by a [self-asserted technical profile](self-asserted-technical-profile.md). The **DateTimeGreaterThan** self-asserted technical profile metadata controls the error message that the technical profile presents to the user. The error messages can be [localized](localization-string-ids.md#claims-transformations-error-messages).
3434

35-
![AssertStringClaimsAreEqual execution](./media/date-transformations/assert-execution.png)
35+
![Diagrams shows how to use the AssertStringClaimsAreEqual claims transformation.](./media/date-transformations/assert-execution.png)
3636

3737
### Example of AssertDateTimeIsGreaterThan
3838

@@ -102,7 +102,7 @@ The self-asserted technical profile calls the validation `Example-AssertDates` t
102102

103103
## ConvertDateTimeToDateClaim
104104

105-
Converts a `DateTime` claim type to a `Date` claim type. The claims transformation removes the time format from the date.
105+
Converts a `DateTime` claim type to a `Date` claim type. The claims transformation removes the time format from the date. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date#convertdatetimetodateclaim) of this claims transformation.
106106

107107
| Element | TransformationClaimType | Data Type | Notes |
108108
| ---- | ----------------------- | --------- | ----- |
@@ -131,7 +131,7 @@ The following example demonstrates the conversion of the claim `systemDateTime`
131131

132132
## ConvertDateToDateTimeClaim
133133

134-
Converts a `Date` claim type to a `DateTime` claim type. The claims transformation converts the time format and adds 12:00:00 AM to the date.
134+
Converts a `Date` claim type to a `DateTime` claim type. The claims transformation converts the time format and adds 12:00:00 AM to the date. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date#convertdatetodatetimeclaim) of this claims transformation.
135135

136136
| Element | TransformationClaimType | Data Type | Notes |
137137
| ---- | ----------------------- | --------- | ----- |
@@ -160,7 +160,7 @@ The following example demonstrates the conversion of the claim `dateOfBirth` (da
160160

161161
## DateTimeComparison
162162

163-
Compares two dates and determines whether the first date is later, earlier, or equal to another. The result is a new Boolean claim with a value of `true` or `false`.
163+
Compares two dates and determines whether the first date is later, earlier, or equal to another. The result is a new Boolean claim with a value of `true` or `false`. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date#datetimecomparison) of this claims transformation.
164164

165165
| Element | TransformationClaimType | Data Type | Notes |
166166
| ---- | ----------------------- | --------- | ----- |
@@ -197,16 +197,16 @@ Use this claims transformation to determine if first date plus the `timeSpanInSe
197197
- **operator**: later than
198198
- **timeSpanInSeconds**: 7776000 (90 days)
199199
- Output claims:
200-
- **result**: true
200+
- **result**: true
201201

202202
## IsTermsOfUseConsentRequired
203203

204-
Determine whether a `dateTime` claim type is earlier or greater than a specific date. The result is a new Boolean claim with a value of `true` or `false`.
204+
Determine whether a `dateTime` claim type is earlier or greater than a specific date. The result is a new Boolean claim with a value of `true` or `false`. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date#istermsofuseconsentrequired) of this claims transformation.
205205

206206
| Item | TransformationClaimType | Data type | Notes |
207207
| ---- | ----------------------- | --------- | ----- |
208-
| InputClaim | termsOfUseConsentDateTime | dateTime | The `dateTime` claim type to check whether it is earlier or later than the `termsOfUseTextUpdateDateTime` input parameter. Undefined value returns `true` result. |
209-
| InputParameter | termsOfUseTextUpdateDateTime | dateTime | The `dateTime` claim type to check whether it is earlier or later than the `termsOfUseConsentDateTime` input claim. The time part of the date is optional. |
208+
| InputClaim | termsOfUseConsentDateTime | dateTime | The `dateTime` claim type to check whether it's earlier or later than the `termsOfUseTextUpdateDateTime` input parameter. Undefined value returns `true` result. |
209+
| InputParameter | termsOfUseTextUpdateDateTime | dateTime | The `dateTime` claim type to check whether it's earlier or later than the `termsOfUseConsentDateTime` input claim. The time part of the date is optional. |
210210
| OutputClaim | result | boolean | The claim type that's produced after this claims transformation has been invoked. |
211211

212212
Use this claims transformation to determine whether a `dateTime` claim type is earlier or greater than a specific date. For example, check whether a user has consented to the latest version of your terms of use (TOU) or terms of service. To check the last time a user consented, store the last time the user accepted the TOU in an [extension attribute](user-profile-attributes.md#extension-attributes). When your TOU wording changes, update the `termsOfUseTextUpdateDateTime` input parameter with the time of the change. Then, call this claims transformation to compare the dates. If the claims transformation returns `true`, the `termsOfUseConsentDateTime` value is earlier than the `termsOfUseTextUpdateDateTime` value, and you can ask the user to accept the updated TOU.
@@ -228,15 +228,15 @@ Use this claims transformation to determine whether a `dateTime` claim type is e
228228
### IsTermsOfUseConsentRequired example
229229

230230
- Input claims:
231-
- **termsOfUseConsentDateTime**: 2020-03-09T09:15:00
232-
- Input parameters:
233-
- **termsOfUseTextUpdateDateTime**: 2021-11-15
234-
- Output claims:
235-
- **result**: true
231+
- **termsOfUseConsentDateTime**: 2020-03-09T09:15:00
232+
- Input parameters:
233+
- **termsOfUseTextUpdateDateTime**: 2021-11-15
234+
- Output claims:
235+
- **result**: true
236236

237237
## GetCurrentDateTime
238238

239-
Get the current UTC date and time and add the value to a claim type.
239+
Get the current UTC date and time and add the value to a claim type. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date#getcurrentdatetime) of this claims transformation.
240240

241241
| Element | TransformationClaimType | Data Type | Notes |
242242
| ---- | ----------------------- | --------- | ----- |
@@ -259,4 +259,4 @@ The following example shows how to get the current data and time:
259259

260260
## Next steps
261261

262-
- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation) on the Azure AD B2C community GitHub repo
262+
- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/date) on the Azure AD B2C community GitHub repo

articles/active-directory-b2c/general-transformations.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: CelesteDG
99
ms.service: active-directory
1010
ms.workload: identity
1111
ms.topic: reference
12-
ms.date: 01/17/2022
12+
ms.date: 02/16/2022
1313
ms.author: kengaderdus
1414
ms.subservice: B2C
1515
---
@@ -20,7 +20,7 @@ This article provides examples for using general claims transformations of the A
2020

2121
## CopyClaim
2222

23-
Copy value of a claim to another. Both claims must be from the same type.
23+
Copy value of a claim to another. Both claims must be from the same type. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/general#copyclaim) of this claims transformation.
2424

2525
| Element | TransformationClaimType | Data Type | Notes |
2626
| ---- | ----------------------- | --------- | ----- |
@@ -49,7 +49,7 @@ Use this claims transformation to copy a value from a string or numeric claim, t
4949

5050
## DoesClaimExist
5151

52-
Checks if the input claim exists, and sets output claim to `true` or `false` accordingly.
52+
Checks if the input claim exists, and sets output claim to `true` or `false` accordingly. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/general#doesclaimexist) of this claims transformation.
5353

5454
| Element | TransformationClaimType | Data Type | Notes |
5555
| ---- | ----------------------- | --------- | ----- |
@@ -78,7 +78,7 @@ Use this claims transformation to check if a claim exists or contains any value.
7878

7979
## Hash
8080

81-
Hash the provided plain text using the salt and a secret. The hashing algorithm used is SHA-256.
81+
Hash the provided plain text using the salt and a secret. The hashing algorithm used is SHA-256. Check out the [Live demo](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/general#hash) of this claims transformation.
8282

8383
| Element | TransformationClaimType | Data Type | Notes |
8484
| ---- | ----------------------- | --------- | ----- |
@@ -115,4 +115,4 @@ The following example demonstrates how to hash an email address. The claims tran
115115

116116
## Next steps
117117

118-
- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation) on the Azure AD B2C community GitHub repo
118+
- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/general) on the Azure AD B2C community GitHub repo

0 commit comments

Comments
 (0)