Switching Account Types in Azure AD B2C Application Registration

Switching Account Types in Azure AD B2C Application Registration

Introduction:

Once you register the Azure AD B2C application, you can update most of the properties of application registration using the Azure portal and the Graph API, however, if you choose the Supported account types other than “Accounts in any identity provider or organizational directory (for authenticating users with user flows)”, you cannot switch back easily like other properties through Azure portal. This blog will help you to know how to update the B2C application account types using a manifest file.

Updating Account Types in Azure AD B2C Application Registration:

Assume you have selected the supported account type as “Accounts in this organizational directory only (Gowtham CBE only – Single tenant)” as shown below figure,

Register B2C application

Now, you won’t get a direct option to update the supported account types from My Organization only to All users.

Demo application
Authentication property

To update the supported account types, you can use the Manifest option.
Open the manifest file and update the signInAudience property from “AzureADMyOrg” to “AzureADandPersonalMicrosoftAccount”. Update the accessTokenAcceptedVersion from null to 2..

Manifest
Manifest

Save the changes, now you can see the account types will be updated to “All Users.”

B2C Account types

Summary:

We have seen how to update the Supported account types property of the registered Azure AD B2C applications with the help of Manifest file.

I hope you have enjoyed the read 😊. Please share your thoughts, thank you!

gowthamk91

Leave a Reply

Discover more from Gowtham K

Subscribe now to keep reading and get access to the full archive.

Continue reading