ContinueOnError true has no effect

Question

In extesntion I'm overrided SelfAsserted-LocalAccountSignin-Email profile

<TechnicalProfile Id="SelfAsserted-LocalAccountSignin-Email">
<ValidationTechnicalProfiles>
<!-- Initiate a normal logon against Azure AD B2C -->
<ValidationTechnicalProfile ReferenceId="login-NonInteractive" ContinueOnError="true" />
<!-- Check if account is locked out. Note: This validation technical profile also return the bad user name and password -->
<ValidationTechnicalProfile ReferenceId="REST-AccountLockout">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="false">
<Value>objectId</Value>
<Value>badPassword</Value>
<Action>SkipThisValidationTechnicalProfile</Action>
</Precondition>
</Preconditions>
</ValidationTechnicalProfile>
</ValidationTechnicalProfiles>
</TechnicalProfile>

Blockquote

and added default value for oid in login-NonInteractive
<TechnicalProfile Id="login-NonInteractive">
<InputClaims>
<!--Replace with your Application ID of the ProxyIdentityExperienceFramework-->
<InputClaim ClaimTypeReferenceId="client_id" DefaultValue="{ProxyIdentityExperienceFramework}" />
<InputClaim ClaimTypeReferenceId="resource_id" PartnerClaimType="resource" DefaultValue="{IdentityExperienceFramework}" />
</InputClaims>
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="objectId" PartnerClaimType="oid" DefaultValue="badPassword"/>
</OutputClaims>
</TechnicalProfile>

Blockquote

But if the credentials are not correct, I never get into the next validation profile

Answer 1

Hello @kirill.kolesnikov , please ensure the metada entry for grant_type is not present (remove or comment it) in the login-NonInteractive Technical Profile (Usually stored in the TrustFrameworkBase policy).

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.

Answer 2

Hello @kirill.kolesnikov , REST-AccountLockout is being skipped due to its precondition: objectId claim value is never set to badPassword.

Let us know if this answer was helpful to you. If so, please remember to accept it so that others in the community with similar questions can more easily find a solution.