How to disable email collection during Phone Sign up using custom policy

Pavana 26 Reputation points
2020-10-22T04:41:20.28+00:00

Hi everyone,

I am trying to use B2C phone sign up authentication for my Mobile app (Android and iOS). I am able to get the tokens after the sign up by setting up custom policies as per the docs in https://video2.skills-academy.com/en-us/azure/active-directory-b2c/phone-authentication.
However I do not want to collect email address during this sign up flow as email address will be collected by user at later part of my app.
I followed the link https://video2.skills-academy.com/en-us/azure/active-directory-b2c/custom-policy-disable-email-verification and was able to turn off the email verification.
But still B2C flow asks for email address of user during sign up (though verification is not happening), is there a way I can make not to ask User for the email address during the process? I am ok not to include email address in the claims.
Kindly suggest how to achieve this.

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,851 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmanpreetSingh-MSFT 56,561 Reputation points
    2020-10-22T08:15:48+00:00

    Hi @Pavana · Welcome to QnA platform and thanks for your query.

    The technical profile used for this purpose is LocalAccountSignUpWithLogonPhoneNumber_CollectEmailAddress, which is being called in orchestration step 3 of UserJourney Id="SignUpOrSignInWithPhone" in Phone_Email_Base.xml file. Remove this step and re-sequence the subsequent orchestration steps.

    Also remove below output claim from SignUpOrSignInWithPhone.xml file as well.

    OutputClaim ClaimTypeReferenceId="strongAuthenticationEmailAddress"

    Another suggestion would be to go with This Sample as it meets your requirement. In order to signup or signin, all you need to provide is the Phone Number and no other attributes are needed to be provided.

    Steps:

    1. Download the starter pack and use the "SocialAndLocalAccountsWithMfa" template.
    2. Follow the steps mentioned here: Add application IDs to the custom policy and upload the policy files.
    3. Update the base policy tag in the TrustFrameworkLocalization.xml file provided in the sample to point towards your TrustFrameworkExtension file and upload the file.
    4. Upload the phone-signup-signin.xml file in B2C IEF section from the sample after updating the file with your tenant name.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.