Post

Hide Email Verification in Azure B2C Custom Policy

Wrestle with inflexible email verification in your πŸ” Sign-In, Sign-Up, and Password Reset journeys? This guide reveals the secrets to customizing πŸ“§ email verification for each flow, empowering you to optimize user experience and unlock greater control.

No more one-size-fits-all frustration! Embrace the power of tailored email verification and transform your Azure AD B2C into a user-centric haven.

Email verification is a default step in most of the flows like SignIn, SignUp, Password Reset, etc.

Approach is slightly different for each flow.

For SignIn Journey

  1. Find the technical profile that reads user data AAD-UserReadUsingEmailAddress

  2. Add following item under metadata tag

    1
    2
    3
    
     <Metadata>
       <Item Key="EnforceEmailVerification">false</Item>
     </Metadata>
    

For Password Reset Journey

  1. Find the technical profile that reads user data AAD-UserReadUsingEmailAddress

  2. Add following item under metadata tag

    1
    2
    3
    
     <Metadata>
       <Item Key="EnforceEmailVerification">false</Item>
     </Metadata>
    
  3. In Password Reset Journey replace the call to AAD-UserReadUsingEmailAddress with LocalAccountDiscoveryUsingEmailAddress

This post is licensed under CC BY 4.0 by the author.

Comments powered by Disqus.