Azure B2C sign up other users

Question

We are using Azure B2C in a new web app. Self sign up and sign in is working just fine. Now we want a flow to add new users without having to verify the e-mail or entering a password. The use case is that a super-user will add new logins for other people to be able to assign app specific credentials to the users before their first login. Before the first login we need those users to run the default flow for password reset.

I was able to create a policy for adding users without verifying the e-mail address and without specifying the password (it is auto-generated behind the scenes) with inspiration from https://stackoverflow.com/questions/57578042/azure-b2c-passwordless-sign-up-with-only-email-in-custom-policy and https://learn.microsoft.com/en-us/azure/active-directory-b2c/string-transformations. The newly account works as expected. However, when running the reset password flow it says "Your account has been locked. Contact your support person to unlock it, then try again." when I hit Continue after e-mail verification. Resetting password for users created with the default sing up/sign in flow is working just fine. I have also tried adding a new custom password reset policy without success.

Any ideas what might be wrong or how I should trouble shoot this?

Answer 1

Hi @Magnus Nilsson , this may have something to do with your lock-out policies. From this document that references password policies, I would look into what you have set. You mentioned you already tried a reset policy, were you getting an error?

Answer 2

I GOT IT WORKING!

The problem was that in the guide from Stack Overflow they reused and modified the technical profile LocalAccountSignUpWithLogonEmail. If I kept that untouched, made a copy of it, gave the copy a new name, modified it to my liking and used that in my user journey it worked as intended.