Azure 自定义策略 B2C 如何读取 Azure AD 用户的员工 ID 并使用此值填充文本框

Question

I am creating a custom policy with the starterpack of azure. My problem is the next: I need to do some change in the TrustFrameworkextensions.xml so that when the user goes to sign in for the first time, it shows on screen the value of the employeeid of the user that made the login for the user to confirm it, that is to say that a textbox appears, like the ones in the image below, with the employee number of the user in AD filled and that the user simply confirms by clicking continue. What do I have to modify or add in this file?

I don't know how I can get the value employeeid, I tried this:

<ClaimsProvider>
  <Domain>XXXXXXX</Domain>
  <DisplayName>Login using XXXXXX</DisplayName>
  <TechnicalProfiles>
    <TechnicalProfile Id="AADXXXXXX-OpenIdConnect">
      <DisplayName>XXXXXXX Employee</DisplayName>
      <Description>Login with your XXXXX account</Description>
      <Protocol Name="OpenIdConnect"/>
      <Metadata>
        <Item Key="METADATA">https://login.microsoftonline.com/xxxxxxxxxx.onmicrosoft.com/v2.0/.well-known/openid-configuration</Item>
        <Item Key="client_id">3700a22a-c43d-441d-a978-14e4abfac8c4</Item>
        <Item Key="response_types">code</Item>
        <Item Key="scope">openid profile</Item>
        <Item Key="response_mode">form_post</Item>
        <Item Key="HttpBinding">POST</Item>
        <Item Key="UsePolicyInRedirectUri">false</Item>
      </Metadata>
      <CryptographicKeys>
        <Key Id="client_secret" StorageReferenceId="B2C_1A_XXXXXXXXSecret"/>
      </CryptographicKeys>
      <OutputClaims>
        <OutputClaim ClaimTypeReferenceId="issuerUserId" PartnerClaimType="oid"/>
        <OutputClaim ClaimTypeReferenceId="tenantId" PartnerClaimType="tid"/>
        <OutputClaim ClaimTypeReferenceId="givenName" PartnerClaimType="employeeID" /> <!--poner given_name-->
        <OutputClaim ClaimTypeReferenceId="surName" PartnerClaimType="family_name" />
        <OutputClaim ClaimTypeReferenceId="displayName" PartnerClaimType="name" />
        <OutputClaim ClaimTypeReferenceId="extension_employeeid" PartnerClaimType="employeeId" />
        <OutputClaim ClaimTypeReferenceId="authenticationSource" DefaultValue="socialIdpAuthentication" AlwaysUseDefaultValue="true" />
        <OutputClaim ClaimTypeReferenceId="identityProvider" PartnerClaimType="iss" />
        <!--<OutputClaim ClaimTypeReferenceId="extension_employeeid" PartnerClaimType="employeeId" /> --><!--ClaimTypeREferenceId nombre campo en b2c y parnerclaimtype nombre campo en AD-->
      </OutputClaims>
      <OutputClaimsTransformations>
        <OutputClaimsTransformation ReferenceId="CreateRandomUPNUserName"/>
        <OutputClaimsTransformation ReferenceId="CreateUserPrincipalName"/>
        <OutputClaimsTransformation ReferenceId="CreateAlternativeSecurityId"/>
        <OutputClaimsTransformation ReferenceId="CreateSubjectClaimFromAlternativeSecurityId"/>
      </OutputClaimsTransformations>
      <UseTechnicalProfileForSessionManagement ReferenceId="SM-SocialLogin"/>
    </TechnicalProfile>
  </TechnicalProfiles>
</ClaimsProvider>

Answer 1

You have to create a self-asserted technical profile that contains the three fields.

Add this to the user journey.

To pre-populate the fields, define them as input fields.