1
votes

I'm working on some webapis. With B2CGraphClient I can create an user, update or delete it.

My problem is how I can verify username and password. I read Microsoft documentation about it but this case is not covered.

Scenario

From an app the user sends its credentials (username / password). This credentials are stored in Azure B2C. I should call B2C and pass to it this credentials and receive if the user is valid and authenticated or not.

1

1 Answers

2
votes

Currently, Azure AD B2C doesn't have any direct support for this.

However, work to support for the Resource Owner Password Credentials flow in Azure AD B2C is in-progress.

This new feature will enable apps to collect a user credential and POST it to the B2C tenant for validation.

5 Oct 20: UPDATE

Support for the Resource Owner Password Credentials flow has been implemented for Azure AD B2C's built-in flows and custom policies.