1) When I configure Salesforce to use our B2C tenant endpoing URLs without a policy query string, it only works for my B2C administrator account. All other accounts fail to authenticate to B2C, with error:
2) When I configure SalesForce to use our B2C policy endpoint URLs, those users can authenticate to B2C but when they are redirected to Salesforce, Salesforce gives an error that an access token was not received.I have uploaded two PDFs (one showing nopolicy config, the other showing the policy config) here. Hoping someone can help!Message: AADSTS50020: User account 'MyName@domain.com' from identity provider 'domain.com' does not exist in tenant 'My Company Name' and cannot access the application 'MyApp' in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.
6 answers
No, unfortunately it doesn't seem possible to use OID between SF and Azure B2C. SF requires a UserInfo endpoint (SF doc (https://help.salesforce.com/articleView?id=sso_provider_openid_connect.htm&type=5)), and B2C doesn't currently support a UserInfo endpoint (MS feature request (https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/34008505-we-definitely-need-to-have-support-for-userinfo-en)). We ended up abandoning this project.
