Azure B2C custom policy client credentials flow is failing and applications insight is not showing any details other than a general excetion

Suresh 0

I have this custom technical profile created as a part of my flow to do client credentials and add some custom claims to my access_token


<ClaimType Id="customClaim">
                <DisplayName>customClaim</DisplayName>
                <DataType>string</DataType>
            </ClaimType>

<ClaimsProvider>

        <DisplayName>ClientCredentialsFlow</DisplayName>

        <TechnicalProfiles>

            <TechnicalProfile Id="ClientCredentialsFlow">

            <DisplayName>Client Credentials Flow</DisplayName>

            <Protocol Name="OAuth2" />

             <Metadata>

                <Item Key="client_id">xxx</Item>

                 <Item Key="client_secret">xxx</Item>

                <Item Key="grant_type">client_credentials</Item>

                <Item Key="scope">https://xxx.onmicrosoft.com/api/.default</Item>

            </Metadata>

            <OutputClaims>

                <!-- Output claims generated by the access token generation -->

                <OutputClaim ClaimTypeReferenceId="customClaim" />

                <!-- Add more output claims as needed -->

            </OutputClaims>

            

            <UseTechnicalProfileForSessionManagement ReferenceId="SM-Noop" />

            </TechnicalProfile>

        </TechnicalProfiles>

    </ClaimsProvider>


 <OrchestrationStep Order="9" Type="ClaimsExchange">
                <ClaimsExchanges>
                    <ClaimsExchange Id="GenerateBearerToken12" TechnicalProfileReferenceId="ClientCredentialsFlow" />
                </ClaimsExchanges>
            </OrchestrationStep>

When i run my userflow i get this error Sorry, but we're having trouble signing you in. We track these errors automatically, but if the problem persists feel free to contact us. In the meantime, please try again. Correlation ID: 7e6f4f9f-3ee1-46e7-bcd8-8f8e6cdf73f4 Timestamp: 2024-01-16 20:47:47Z AADB2C: An exception has occurred. In Application Insights it shows nothng but this error User's image

Why is my Client credentials grant not working .. I tested the url the client_id and client secret via postman using the token endpoint and it works great and i get an access token .. Any help here would be greatly apprecoated

Suresh 0

After installing Visual Studio Code plugin i see this error in the clientcredetdials flow

{
    "Kind": "Action",
    "Content": "Web.TPEngine.StateMachineHandlers.SendRequestHandler"
  },
  {
    "Kind": "FatalException",
    "Content": {
      "Time": "8:47 PM",
      "Exception": {
        "Kind": "Handled",
        "HResult": "80004003",
        "Message": "Value cannot be null.\r\nParameter name: uriString",
        "Data": {}
      }
    }
  }

Suresh 0

After Installing InsightExplorer in vscode plugin I see the following error

{
    "Kind": "Action",
    "Content": "Web.TPEngine.StateMachineHandlers.SendRequestHandler"
  },
  {
    "Kind": "FatalException",
    "Content": {
      "Time": "8:47 PM",
      "Exception": {
        "Kind": "Handled",
        "HResult": "80004003",
        "Message": "Value cannot be null.\r\nParameter name: uriString",
        "Data": {}
      }
    }
  }

Suresh 0 Reputation points

2024-01-16T22:07:57.69+00:00

not sure where to add and what URI to add
Shweta Mathur 30,181 Reputation points Microsoft Employee

2024-01-17T10:57:13.5533333+00:00

@Suresh
Thanks for reaching out. It seems it showing issue with the request. Did you try without custom claim or tried to take fiddler trace. Is it taking value in all the request parameters?
Suresh 0 Reputation points

2024-01-17T13:17:58.29+00:00

I removed the outputclaim and still have the same issue .. What I am trying to achecieve with a signin journey where i have a custom policy .. I can see the ID Token generating with custom claim . I need the access token as well sent back as a bearer token when the redirect happens When i sent to jwt.io it sends the idtoken as a queryString .. when i send to my internal app I dont see the beareretoken or the idtoken .. So trying to troubleshoot that aswell
John P. Reilly 0 Reputation points

2024-03-16T16:10:48.39+00:00

Having the same problem. Following.

CH Vamsi Krishna 0

        "HResult": "80004003",
        "Message": "Value cannot be null.\r\nParameter name: uriString",

Share via

Azure B2C custom policy client credentials flow is failing and applications insight is not showing any details other than a general excetion

Your answer