Azure AD B2C User Account Management from JavaScript Clients

Question

I used this dotnetcore sample ms-identity-dotnetcore-b2c-account-management to get all the users from a AD B2C Directory.

Can this be achieved from a JavaScript client like Angular using some API? I'm trying not to use an Azure Function with the SDK code but directly call any existing Azure service from the Angular application itself to get the users.

UPDATE:

I used

    "@azure/@azure/msal-angular": "^2.0.0-alpha.0",
    "@azure/msal-browser": "^2.7.0"

and can login and logout from Azure AD B2C.

But the login requires username and password. I can't get all the users in the B2C with the token that I get after login. I get authentication failed error.

I think my app needs to access the B2C directory without login and password by following the instructions here: https://docs.microsoft.com/en-us/graph/auth-v2-service . This is for Background services (daemons) applications. Now I have to use two libraries to get tokens (one to login and one to get the users).

I'm confused by a few different libraries also:

https://developer.microsoft.com/en-us/graph/get-started/angular https://docs.microsoft.com/en-us/graph/sdks/sdk-installation#install-the-microsoft-graph-javascript-sdk https://docs.microsoft.com/en-us/graph/toolkit/get-started/use-toolkit-with-angular

1. Can I achieve the login as well as reading the users with a single library @azure/msal-angular and the same token?
2. Can I read the users only using Background services (daemons) flow only and not by "@azure/msal-angular": "^2.0.0-alpha.0" ?

Answer 1

As you can see the title Azure AD B2C user account management with .NET Core and Microsoft Graph , it calls Microsoft Graph API.

Microsoft Graph provides the Javascript SDK .

You can refer to this example to list the Azure AD B2C users.

const options = {
    authProvider,
};

const client = Client.init(options);

let res = await client.api('/users')
    .get();

An Angular sample for your reference.

Answer 2

1. You can use the same app (website) to “read users” via graph and login via an AAD B2C user flow. These are not the same tokens, they are acquired from different token issuers -AAD/AAD B2C . MSAL supports both token endpoints. What you're asking to do doesn't make much sense. A user read op is usually server side (AAD token endpoint/Graph API/client_credential). A user login is client side (AAD B2C authorise endpoint/Your API/Auth Code). This means a user who logs in via AAD B2C cannot call Graph API. Read for more info - https://github.com/MicrosoftDocs/azure-docs/issues/56756#issuecomment-652903203

2. Sure, just follow an Azure AD guide for Graph API access. Yes it works in AAD B2C directories. https://docs.microsoft.com/en-us/graph/tutorials/node