Provisioning B2C userIdentities and signInNames

You can use the Update and Modify operations like Add, Set, and Remove of identities for a social and local user account in an Azure Active Directory B2C tenant.

If you want to leverage this functionality, add the following attribute in the provisioning policy with type as string and multi as true (with the value in JSON format): 

  • identities

Sample provisioning request: 

  1. For Local B2C user :

    Copy 
    <?xml version='1.0' encoding='UTF-8'?>
     <!DOCTYPE ProvisioningPlan PUBLIC "sailpoint.dtd" "sailpoint.dtd">
      <ProvisioningPlan>
       <AccountRequest op="Add">
        <AttributeRequest name="identities" op='Add'>
          <Value>
           <List>
          <String>{"signInType":"userName", "issuer": "SPTechQA.onmicrosoft.com", "value":"User1"}</String>
        </List>
       </Value>
      </AttributeRequest>
     </AccountRequest>
    </ProvisioningPlan>

  2. For Social B2C user:

    Copy 
    <?xml version='1.0' encoding='UTF-8'?>
     <!DOCTYPE ProvisioningPlan PUBLIC "sailpoint.dtd" "sailpoint.dtd">
      <ProvisioningPlan>
       <AccountRequest op="Add">
        <AttributeRequest name="identities" op='Add'>
         <Value>
          <List>
         <String>{"signInType":"federated", "issuer": "gmail.com", "value":"User2"}</String>
        </List>
       </Value>
      </AttributeRequest>
     </AccountRequest>
    </ProvisioningPlan>