Azure AD B2C: Uploading custom policies via github actions

Question

Hello,

I am trying to upload a few custom policies(base, extension and RP) to Azure B2C using github actions that would use an azure service principal(client id and secret), tenant id and subscription id. I have used this github action:

https://github.com/marketplace/actions/deploy-azure-ad-b2c-trustframework-policy

When the action executes in my pipeline, I get this error:

Action failed: client_secret_basic client authentication method requires a client_secret

The github secrets section of the repository has CLIENT_SECRET defined like this:

There is another variable called AZURE_CREDENTIALS that has a JSON like this:

{  
  "clientId": "my-clientId",  
  "clientSecret": "my-clientSecret",  
  "tenantId": "my-tenantId",  
  "subscriptionId": "my-subscriptionId"  
}  

Any clues on what I am missing? Appreciate your responses.

Answer 1

@Aspirant3434342-8925 I am able to deploy Azure AD B2C Trustframework policy using existing action template - https://github.com/marketplace/actions/deploy-azure-ad-b2c-trustframework-policy without any error. Here are the steps I have followed -

1. I have created a GitHub repository and imported the existing template by going to "Set up a workflow yourself" from Actions tab on GitHub
   
2. Search Marketplace for action template you want to include (Deploy Azure AD B2C TrustFramework Policy)
   
3. Copy the snippet into your .yml file by clicking copy button.
   
4. Configure the environment variables in .yml file and add other details like file path, policy name.
   
5. For Tenant Name and client Id refer the variables using ${<!-- -->{ env.tenant }} and ${<!-- -->{ env.clientId }}
   
6. Now for Client secret you need to setup "Secrets" in your repository settings to define a secret name and assign Client Secret value of the registered application.
   
7. You can refer to the stored secret in .yml file by using ${<!-- -->{ secrets.clientSecret }}
   
   8. Once you save the file you can check the Actions tab for build status.