I have my Azure B2C app set up with multiple providers (Facebook, Google, Apple, Twitter) but it seems I never get the idp_access_token claim for Twitter. The access token application claim is checked in the user flow being used to authenticate. I do not get any error messages and the authentication is always successful. I get the rest of the claims just fine.
Is this normal behavior for the Twitter provider or is it perhaps something not correctly configured ?
@MiroGeorgiev-1586, As far as I know once the user is authenticated, for all the IDPs you only get the ID token or the profile details of the user, which B2C can use to understand if the user is successfully authenticated by the IDP (Google, Facebook, Twitter, GitHub etc.)or not. The access-token is mostly used to call another resource protected by that particular IDP. Now post authentication if B2C goes ahead and requests for any other resource or calls any API protected by that IDP, thats when B2C will send a request asking the respective IDP to send the access-token, so that using that access-token B2C call that respective procted resource or api.
7 people are following this question.
