Skip to content

Commit f9d8758

Browse files
authored
Update manage-user-accounts-graph-api.md
Adding identities sample
1 parent d1becde commit f9d8758

File tree

1 file changed

+23
-1
lines changed

1 file changed

+23
-1
lines changed

articles/active-directory-b2c/manage-user-accounts-graph-api.md

Lines changed: 23 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ manager: celestedg
99
ms.service: active-directory
1010
ms.workload: identity
1111
ms.topic: conceptual
12-
ms.date: 02/14/2020
12+
ms.date: 03/16/2020
1313
ms.author: mimart
1414
ms.subservice: B2C
1515
---
@@ -60,6 +60,28 @@ In the Microsoft Graph API, both local and federated identities are stored in th
6060
|issuer|string|Specifies the issuer of the identity. For local accounts (where **signInType** is not `federated`), this property is the local B2C tenant default domain name, for example `contoso.onmicrosoft.com`. For social identity (where **signInType** is `federated`) the value is the name of the issuer, for example `facebook.com`|
6161
|issuerAssignedId|string|Specifies the unique identifier assigned to the user by the issuer. The combination of **issuer** and **issuerAssignedId** must be unique within your tenant. For local account, when **signInType** is set to `emailAddress` or `userName`, it represents the sign-in name for the user.<br>When **signInType** is set to: <ul><li>`emailAddress` (or starts with `emailAddress` like `emailAddress1`) **issuerAssignedId** must be a valid email address</li><li>`userName` (or any other value), **issuerAssignedId** must be a valid [local part of an email address](https://tools.ietf.org/html/rfc3696#section-3)</li><li>`federated`, **issuerAssignedId** represents the federated account unique identifier</li></ul>|
6262

63+
The following **Identities** property, with a local account identity with a sign-in name, an email address as sign-in, and with a social identity.
64+
65+
```JSON
66+
"identities": [
67+
{
68+
"signInType": "userName",
69+
"issuer": "contoso.onmicrosoft.com",
70+
"issuerAssignedId": "johnsmith"
71+
},
72+
{
73+
"signInType": "emailAddress",
74+
"issuer": "contoso.onmicrosoft.com",
75+
"issuerAssignedId": "[email protected]"
76+
},
77+
{
78+
"signInType": "federated",
79+
"issuer": "facebook.com",
80+
"issuerAssignedId": "5eecb0cd"
81+
}
82+
]
83+
```
84+
6385
For federated identities, depending on the identity provider, the **issuerAssignedId** is a unique value for a given user per application or development account. Configure the Azure AD B2C policy with the same application ID that was previously assigned by the social provider or another application within the same development account.
6486

6587
### Password profile property

0 commit comments

Comments
 (0)