Is it normal that Twitter provider in Azure B2C does not return idp_access_token?

Miro Georgiev 1 Reputation point
2021-09-05T19:46:33.397+00:00

I have my Azure B2C app set up with multiple providers (Facebook, Google, Apple, Twitter) but it seems I never get the idp_access_token claim for Twitter. The access token application claim is checked in the user flow being used to authenticate. I do not get any error messages and the authentication is always successful. I get the rest of the claims just fine.

Is this normal behavior for the Twitter provider or is it perhaps something not correctly configured ?

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,663 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. soumi-MSFT 11,716 Reputation points Microsoft Employee
    2021-09-27T12:33:27.51+00:00

    @Miro Georgiev , As far as I know once the user is authenticated, for all the IDPs you only get the ID token or the profile details of the user, which B2C can use to understand if the user is successfully authenticated by the IDP (Google, Facebook, Twitter, GitHub etc.)or not. The access-token is mostly used to call another resource protected by that particular IDP. Now post authentication if B2C goes ahead and requests for any other resource or calls any API protected by that IDP, thats when B2C will send a request asking the respective IDP to send the access-token, so that using that access-token B2C call that respective procted resource or api.

    0 comments