Introduction: By default, local accounts in Azure AD B2C are often configured with the DisablePasswordExpiration policy, which prevents passwords from expiring. While this behavior simplifies user experience, many organizations require periodic password rotation to align with internal security standards and…

Introduction: Before diving into application session management in Azure AD B2C, let’s consider a real-world scenario. You have a .NET web application integrated with Azure AD B2C for authentication, and your security requirement is straightforward:The user session must automatically expire…

Introduction: his article explains how to hide the “Change Email” (Change Claims) button that appears in the Azure AD B2C forgot password flow when using Display Controls for email verification. We recommend you to read the Azure AD B2C custom…

Introduction: In a standard Azure AD B2C password reset flow, when a user clicks “Forgot your password?” they are presented with an email verification screen. The user enters their email address and clicks “Send verification code.” At this point, the…

Introduction: During sign-up in Azure AD B2C, users must provide an email address and verify it before creating an account. A common requirement is to check whether the email address already exists in the directory and show an error message…