Provisioning B2C userIdentities and signInNames
You can use the Update and Modify operations like Add, Set, and Remove of userIdentities
and signInNames
for a social and local user account in an Azure Active Directory B2C tenant.
If you want to leverage this functionality, add the following provisioning plan to the application XML using the application Debug page:
<Form name="UpdateB2C" objectType="account" type="Update">
<Attributes>
<Map>
<entry key="pageTitle" value="UpdateB2C"/>
</Map>
</Attributes>
<Section name="UpdateB2CPlan">
<Field displayName="userIdentities" helpKey="userIdentities" multi="true" name="userIdentities" reviewRequired="true" type="string"/>
<Field displayName="signInNames" helpKey="signInNames" multi="true" name="signInNames" reviewRequired="true" type="string"/>
</Section>
</Form>
The following is a sample provisioning request:
Note
Update the operation type (op) as Set for the set operation and Remove for the remove operation.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ProvisioningPlan PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<ProvisioningPlan nativeIdentity="0193a966-XXXX-46a2-9326-XXXXXX6160X4">
<AccountRequest application="Azure-B2C" nativeIdentity="0193a966-XXXX-46a2-9326-XXXXXX6160X4" op="Modify">
<AttributeRequest name="signInNames" op='Add'>
<Value>
<List>
<String>{"type":"userName", "value":"testNGSignInNameA3"}</String>
<String>{"type":"userName", "value":"signInNamesB3"}</String>
</List>
</Value>
</AttributeRequest>
<AttributeRequest name="userIdentities" op='Add'>
<Value>
<List>
<String>{"issuerUserId":"issuerUserIds2", "issuer":"google.com"}</String>
<String>{"issuerUserId":"issuerUserIds3", "issuer":"twitter.com"}</String>
</List>
</Value>
</AttributeRequest>
</AccountRequest>
</ProvisioningPlan>