Issue with Using Azure B2C for Portal Authentication

(0) Share

Report

Posted on by Community Member

I am trying to setup the Dynamics Portal to use Azure B2C for authentication. I have gone through the steps multiple times and had other people do it as well. We get a button on the sign in screen to take you to the login screen. However, it gives an error. The issue appears to the what do put for "Federation Name". I am assuming I can make something up and use it consistently in the steps. However, in step 3 it has a note in blue that the "Reply URL" must be in the format "[portal domain]/signin-[Federation-Name]". I did that but when I go directly to that URL, I get a 404 not found. Any help would be appreciated.

docs.microsoft.com/.../azure-ad-b2c

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (1)

Aric Levin - MVP 30,190 Moderator on at

Like (0)

Report
Copy link

Link copied!

The federation name is the name that you set up across the board.

In Site Settings, you can call it AzureB2C or b2c or anything else you want to set it up with.

You will need to use it for the Authority, ClientId, ExternalLogoutEnabled, RedirectUri:

The same will be set in Azure B2C as well. The reply url in Azure will be the same as the RedirectUri in Dynamics Site Settings.

Example:

Authentication/OpenIdConnect/b2c/Authority...

Hope this helps.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Thanks Aric. Yes I did that and just wanted to make sure that was correct. The issue appears to be when you go directly to the URL for "RedirectUri", you get a 404 not found error. Here is an example of what the site URL is: https://mysite.com/signin-b2c. I can go to "https://mysite.com/signin" and that works but when you add the dash followed by the federation name, it gives 404.

Was this reply helpful? Yes No
Suggested answer

Dmytro Rutkovskyi 1,835 on at

Like (0)

Report
Copy link

Link copied!

Hi, You don't need go directly to the url, because it intended to respond to auth request, and not normall GET request.

I think something is missing, There are several links with step-by-step configuration, like this one : debajmecrm.com/.../dynamics-365-adx-portals-dynamics-365-portal-authentication-with-external-identities-part-i-authentication-with-azure-active-directory

Also you can look into www.adoxio.com/.../azure-ad-b2c-setup - but it is for setup Connect365, which is works on top of the Portals. Again - it contains all steps for Portal configuration as well.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Dmytro, thank you for the links. I changed my setting "Authentication/OpenIdConnect/b2c/Authority" to domainhere.b2clogin.com/.../v2.0 I got this URL from the top of the "Sign-up or sign-in policy" in azure. Is that correct? Currently when I click the "B2C" button in the portal it takes me <portaladdress>/Account/Login/ExternalAuthenticationFailed

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (1)

Report
Copy link

Link copied!

I found my issue. The value I was using above for "Authority" was incorrect. You have to open the metadata and get the "Issuer" value. The instructions below are more clear on how to do that in step 19. The microsoft instructions listed in the first post is too vague and doesn't explain this step well.

www.adoxio.com/.../azure-ad-b2c-setup

Was this reply helpful? Yes No