I can subscribe to User ChangeNotifications, but never receive notifications. Is this supported or am I doing something wrong?

Brian Engen 1

Hello,

I can follow the guide (linked below) to set up change notifications with Azure AD and everything works great. When I change my configuration to subscribe to B2C, however, things are not so great. I can create a subscription via the graph API against my B2C instance, but I never receive any notifications.

I followed this guide.
https://learn.microsoft.com/en-us/graph/webhooks

Specifically, the resource I'm subscribing to is /Users

I notice this guide was posted pretty recently, so I have to wonder if this is supported yet on B2C as I'm aware B2C is not at feature parity with AD. I've been googling around and can't find any explicit reference to support for subscriptions and change notifications in B2C. I just wondered if maybe I was doing something wrong, because I found it curious that I was able to create the subscription.

Thanks!

1 answer

George Juma 1 Reputation point

2021-04-19T16:33:31.18+00:00

@Brian Engen

I'd love to help. Could you please expound further what the B2C scenario is. If possible kindly share your subscription payload too.

Thanks
Please sign in to rate this answer.
Brian Engen 1 Reputation point

2021-04-21T22:45:06.98+00:00

Can you confirm if subscriptions are supported in B2C or not? I will post some of my use cases below as I exceeded the 1000 char per post limit

as for my subscription payload, I just used the graph api sdk as such:

var subscription = await Graph .Subscriptions .Request() .AddAsync(new Subscription { ChangeType = "updated,deleted", NotificationUrl = "https://48d766c27a8b.ngrok.io/notification", Resource = "/users", ExpirationDateTime = DateTimeOffset.UtcNow.AddHours(1), ClientState = $"{Constants.ClientState:N}" }, stoppingToken);

This worked fine with Azure AD and I received notifications as expected. When connected to B2C, the subscription was created successfully and the handshake completed as expected, but I never received any notifications.

Brian Engen 1 Reputation point

2021-04-21T22:45:44.75+00:00

A major use case is search. We have requirements to execute a contains search on email, givenName, surname, and displayName. However, I've found that if I $filter on email (actually identities/issuerAssignedId) I can't filter on anything else. Graph API returns an error indicating other properties can't be filtered when identities is included in the filter. As a result, we've been considering maintaining our own search index to better meet our needs.

Brian Engen 1 Reputation point

2021-04-21T22:45:56.503+00:00

another is audit. We have requirements to audit updates to users for later retrieval. customers in my system have regulatory needs to produce regular audit reports, which include changes to users (among other things) in addition to the user that made the change. This is currently facilitated by various components of the product publishing events which are recorded and formatted by a microservice for later retrieval/export. I have looked into what capabilities B2C has for this, but nothing appears to meet my needs. If I could receive user update events from B2C, I could adapt those into my current audit system.

Brian Engen 1 Reputation point

2021-04-21T22:46:16.253+00:00

one more: microservices. We try to adhere to the "microservices should own their own data" guideline as much as possible. While we haven't implemented this yet, we are considering having some of our microservices have a table of just userId, identityId, givenName, surname, displayName since these are so often needed for display purposes when related to data in ways such as "who created this," "who last modified this," "who is this assigned to" etc. we likely wouldn't have all of these services subscribe to b2c/graph notifications, but would more likely have a single proxy subscription that republishes a projection of the notification/event on our own servicebus.

Brian Engen 1 Reputation point

2021-04-22T13:31:34.32+00:00

Another use case I remembered this morning: reporting. We have a reporting system that uses stored procedures to generate reports for our customers. Again, these reports need to include the names of users and I do not want sprocs calling graph api to resolve those names. If this reporting system could subscribe to events, it could be notified when the name of a user changes and keep its own DB up to date. The alternative is to implement a polling system which I would prefer to avoid.
Sign in to comment