使用图形API创建Azure AD B2C社交帐户 [英] Creating Azure AD B2C Social Account using graph API

问题描述

我已将google和facebook添加为我的Azure AD B2C租户的身份提供者.现在，我想使用azure广告图api为google和facebook创建社交用户.在api文档中，提到了"userIdentities"是必需属性，必须将其归为"issuer"和"issuerUserId"这两个属性.对于"issuer"，很清楚应该是什么值，但是无法找到如何为identityProvider获取"issuerUserId".它被描述为社交身份提供者使用的唯一用户标识符"，我早些时候认为它对于身份提供者是唯一的，但是当尝试时不是.同一身份提供者的不同用户需要传递不同的值.我经历了 https://docs.microsoft.com/en-us/azure/active-directory-b2c/claimstransformations ，所以我认为它与用户属性有关，但仍不确定如何在API调用中传递值?还是任何随机值都可以?

I have added google and facebook as Identity Provider for my Azure AD B2C tenant . Now I want to create social users for both google and facebook using azure ad graph api . In api documentation it is mentioned that "userIdentities" is required attribute which is having to sub attributes "issuer" and "issuerUserId" . for "issuer" it is quite clear what should be the value , but am not able to find how to get "issuerUserId" for identityProvider. It is described as "The unique user identifier used by the social identity provider" , earlier i thought it is unique for identity provider but when tried it is not . Different value needs to passed for different user of same identity provider . I went through https://docs.microsoft.com/en-us/azure/active-directory-b2c/claimstransformations , so i think it is related to user attributes but still not sure how generate value to pass in api call ? Or any random value is ok?

推荐答案

我假设您是指

I assume you are referring to the documentation for user migration here. The documentation mentions

根据身份提供者，颁发者用户ID是唯一的每个应用程序或开发帐户给定用户的价值.使用与应用程序ID相同的应用程序ID配置Azure AD B2C策略先前是由社交服务提供商或其他应用程序分配的在同一个开发帐户中.

Depending on the identity provider, the Issuer User ID is a unique value for a given user per application or development account. Configure the Azure AD B2C policy with the same application ID that was previously assigned by the social provider or another application within the same development account.

这里的假设是，当您从旧系统中迁移用户时，您已经从诸如Google和Facebook之类的社交帐户中获得了这样的唯一标识符.可以以base 64编码的形式使用.

The assumption here is when you are migrating user from old systems you already have such unique identifier from the social accounts such as Google and Facebook. It can be used in base 64 encoded form.

这也有助于了解您的情况?

这篇关于使用图形API创建Azure AD B2C社交帐户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！