I have an Azure AD B2C tenant and app within it with enabled authentication using Facebook, other AAD and local accounts. Users in B2C have some custom fields which are populated on registration and used as claims in JWT token.
But I cannot see this fields value’s anywhere in the Azure portal nor using Microsoft Graph API.
Where they are stored and how to get access to them?
2
Answers
You can access custom claims by including them in the token sent to the app or by querying the Azure AD Graph API (not the Microsoft Graph yet).
Here’s some C# code for #2
See this guide to include custom claims/attributes in your JWT: Use custom attributes to collect information about your consumers
See this guide: Use the Azure AD Graph API and sample app to view custom claims via Azure AD Graph API.
In the Graph API they will come back as:
extension_[GUID]_[ClaimName]