Users getting redirected to ADB2C Sign-in screen when doing change phone number or email with MFA exception

Anupam Baksi 0 Reputation points
2024-09-19T06:25:19.7233333+00:00

We are experiencing a strange issue with our application (all environments) where we are getting redirected to ADB2C sign-in (Custom policy with RestAPI provider and Identity API) screen intermittently when trying to change phone number or email. We have tried below so far but no luck - (checked from https://video2.skills-academy.com/en-us/answers/questions/69770/mfa-session-doesnt-work-in-azure-b2c-custom-policy?page=1&orderby=Helpful&comment=answer-70797#newest-answer-comment)

  1. In none of our flows we have added prompt=login
  2. We have tried adding <IncludeTechnicalProfile ReferenceId="SM-MFA" />
  3. Validated OutputClaim and tried replacing the PartnerClaimType
  4. We validated Risky users /conditional policies to check if its related to specific users or MFA

Additional information:

So far we have identified below two exceptions when it gets redirected to login screen.

  • "A multi-factor poll request has resulted in an unknown poll response" - from browser network tab
  • "Phone verification request is throttled" - from ADB2C user audit logs (we checked but could not locate any limits/restrictions which might be causing this)

Request you to share your inputs /suggestions on this which would be a great help.

Many Thanks.,

Anupam

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,861 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,585 questions
{count} votes

1 answer

Sort by: Most helpful
  1. James Hamil 24,571 Reputation points Microsoft Employee
    2024-09-25T20:33:14.95+00:00

    Hi @Anupam Baksi , can you double check the throttling limits for phone verification requests? Also, please review this thread: https://video2.skills-academy.com/en-us/answers/questions/797036/azure-b2c-mfa-sms-throttling-hits-after-first-rese

    This is most likely the root cause of the issue. If nothing works to resolve this we can open a support ticket for you!

    Best,

    James


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.