IefPolicies

3.1.21

strings/MSA.xml

                                <ClaimsProvider xmlns="http://schemas.microsoft.com/online/cpim/schemas/2013/06">

    <!-- https://learn.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-microsoft-account?pivots=b2c-custom-policy /-->

    <Domain>live.com</Domain>

    <DisplayName>Microsoft Account</DisplayName>

    <TechnicalProfiles>

      <TechnicalProfile Id="{0}-OIDC">

        <DisplayName>Microsoft Account</DisplayName>

        <Protocol Name="OpenIdConnect" />

        <Metadata>

          <Item Key="ProviderName">https://login.live.com</Item>

          <Item Key="METADATA">https://login.live.com/.well-known/openid-configuration</Item>

          <Item Key="response_types">code</Item>

          <Item Key="response_mode">form_post</Item>

          <Item Key="scope">openid profile email</Item>

          <Item Key="HttpBinding">POST</Item>

          <Item Key="UsePolicyInRedirectUri">false</Item>

          <Item Key="client_id">{{{0}:clientId}}</Item>

        </Metadata>

        <CryptographicKeys>

          <Key Id="client_secret" StorageReferenceId="B2C_1A_{0}AppSecret"/>

        </CryptographicKeys>

        <OutputClaims>

          <OutputClaim ClaimTypeReferenceId="issuerUserId" PartnerClaimType="oid" />

          <OutputClaim ClaimTypeReferenceId="givenName" PartnerClaimType="given_name" />

          <OutputClaim ClaimTypeReferenceId="surName" PartnerClaimType="family_name" />

          <OutputClaim ClaimTypeReferenceId="displayName" PartnerClaimType="name" />

          <OutputClaim ClaimTypeReferenceId="authenticationSource" DefaultValue="socialIdpAuthentication" />

          <OutputClaim ClaimTypeReferenceId="identityProvider" PartnerClaimType="iss" />

          <OutputClaim ClaimTypeReferenceId="email" />

        </OutputClaims>

        <OutputClaimsTransformations>

          <OutputClaimsTransformation ReferenceId="CreateRandomUPNUserName" />

          <OutputClaimsTransformation ReferenceId="CreateUserPrincipalName" />

          <OutputClaimsTransformation ReferenceId="CreateAlternativeSecurityId" />

          <OutputClaimsTransformation ReferenceId="CreateSubjectClaimFromAlternativeSecurityId" />

        </OutputClaimsTransformations>

        <UseTechnicalProfileForSessionManagement ReferenceId="SM-SocialLogin" />

      </TechnicalProfile>

    </TechnicalProfiles>

  </ClaimsProvider>