Azure AD B2C 配置 URL 无法到达

Question

I configured a new Azure AD B2C Tenant for testing purposes. I am trying to follow the example to use Azure AD B2C with Android.

https://github.com/Azure-Samples/active-directory-b2c-android-native-appauth

I created beside the B2C Tenant already a User Flow for the login.

During the authentication flow the app wants to read the "well known openid configuration" for my User Flow

https://login.microsoftonline.com/geomobilestage.onmicrosoft.com/v2.0/.well-known/openid-configuration?p=B2C_1_login_signin

but the URL returns a 404 error. But when I try the following URL to read the configuration I receive http status 200

https://geomobilestage.b2clogin.com/geomobilestage.onmicrosoft.com/B2C_1_login_signin/v2.0/.well-known/openid-configuration

The URLs are public so everyone can try to call them in the browser to see the result.

So the configuration itself exists and seems to be ok. I have already another Azure AD B2C tenant and when I try to call the first URL for this tenant everything is fine. It seems to be that I am missing some configuration in the Azure portal but I really have no idea what I am missing and even where to look.

Regards

Michael

Answer 1

For Azure AD, see here :

https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration

For Azure AD B2C, see here :

https://{domain-name}.b2clogin.com/{domain-name}.onmicrosoft.com/{policy}/v2.0/.well-known/openid-configuration

The key thing here is to realize that the b2c config endpoint has a reference to a policy in it, otherwise it's likely AAD.