question

SiegfriedHeintze-9929 avatar image
SiegfriedHeintze-9929 asked ·

How to set ValidateIssurer to False?

I'm following along with the directions for the Microsoft example in GitHub: active-directory-b2c-javascript-angular-spa

Part one where I use Microsoft's tenant works great!

I am now trying to set up my own AAD B2C tenant with Facebook as an identity provider.

The directions say:

> To use <your-tenant-name>.b2clogin.*, you need set validateIssuer: false. Learn more about using b2clogin.com.

Please help me understand where I set "validateIssurer". I was hoping to see an explanation when I clicked on the "Learn more about using b2cLogin.com" and all I can find there is a discussion of validateAuthority.







[1]: https://github.com/Azure-Samples/active-directory-b2c-javascript-angular-spa

azure-active-directoryazure-ad-b2c
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

amanpreetsingh-msft avatar image
amanpreetsingh-msft answered ·

Hi @SiegfriedHeintze-9929,

You can use below code to set ValidateIssuer to False:

 this.clientApplication = new UserAgentApplication(
   env.auth.clientId,
   env.auth.loginAuthority,
   this.authCallback.bind(this),
   {
     validateAuthority: false
   }
 );


Please do not forget to "Accept the answer" wherever the information provided helps you. This will help others in the community as well.

Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SiegfriedHeintze-9929 avatar image
SiegfriedHeintze-9929 answered ·

AmanPreetSingh:

I see you are setting validateAuthority and not validateIssuer.

Ooops, perhaps I could have been more clear. active-directory-b2c-javascript-angular-spa references
active-directory-b2c-javascript-nodejs-webapi. In this latter link they say:

To use <your-tenant-name>.b2clogin.*, you need set validateIssuer: false. Learn more about using b2clogin.com.

I cannot find validateIssuer anywhere. Perhaps they intended to say ValidateAuthority?

Thank you


Siegfried





2 comments Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@SiegfriedHeintze-9929, ValidateAuthority and ValidateIssuer refers to same thing.

0 Votes 0 · ·

ah hah! Thanks!

0 Votes 0 · ·