azure - 无法将查询参数传递给 azure-ad-b2c 自定义策略并存储值

Question

我有一个场景，我必须将 URL 中的查询参数传递给我的自定义注册策略，但到目前为止我的所有尝试都不起作用。按照我在 github 中找到的指南，我似乎缺少一些东西。我正在尝试传递 LoyaltyNumber，并且我在策略中将此属性定义为 extension_LoyaltyNumber。下面是片段

我的自定义注册政策

<RelyingParty>
<DefaultUserJourney ReferenceId="SignUp" />
<UserJourneyBehaviors>
   <ContentDefinitionParameters>
    <Parameter Name="LoyaltyNumber">{OAUTH-KV:LoyaltyNumber}</Parameter>
  </ContentDefinitionParameters>
</UserJourneyBehaviors>
<TechnicalProfile Id="PolicyProfile">
  <DisplayName>PolicyProfile</DisplayName>
  <Protocol Name="OpenIdConnect" />
  <InputClaims>
    <InputClaim ClaimTypeReferenceId="email" />
    <InputClaim ClaimTypeReferenceId="extension_LoyaltyNumber" /> 
  </InputClaims>
  <OutputClaims>
    <OutputClaim ClaimTypeReferenceId="displayName" />
    <OutputClaim ClaimTypeReferenceId="givenName" />
    <OutputClaim ClaimTypeReferenceId="surname" />
    <OutputClaim ClaimTypeReferenceId="signInNames.emailAddress" PartnerClaimType="email" />
    <OutputClaim ClaimTypeReferenceId="objectId" PartnerClaimType="sub"/>
    <OutputClaim ClaimTypeReferenceId="tenantId" AlwaysUseDefaultValue="true" DefaultValue="{Policy:TenantObjectId}" />
    <OutputClaim ClaimTypeReferenceId="extension_ValidPassword" />
    <OutputClaim ClaimTypeReferenceId="extension_LoyaltyNumber" AlwaysUseDefaultValue="true"/>
  </OutputClaims>
  <SubjectNamingInfo ClaimType="sub" />
</TechnicalProfile>

在我的 TrustFrameworkExtension.xml 中，我已在本地帐户中将其定义如下

<ClaimsProvider>
      <DisplayName>Local Account</DisplayName>
      <TechnicalProfiles>
        <!--Local account sign-up page-->
        <TechnicalProfile Id="LocalAccountSignUpWithLogonEmail">
        <Metadata>
            <Item Key="IncludeClaimResolvingInClaimsHandling">true</Item>
        </Metadata>
       <InputClaims>
           <InputClaim ClaimTypeReferenceId="extension_LoyaltyNumber" AlwaysUseDefaultValue="true" DefaultValue="{OAUTH-K:LoyaltyNumber}" />
         </InputClaims>                                                                      
          <OutputClaims>
            <OutputClaim ClaimTypeReferenceId="email" PartnerClaimType="Verified.Email" Required="true" />
            <OutputClaim ClaimTypeReferenceId="newPassword" Required="true" />
            <OutputClaim ClaimTypeReferenceId="reenterPassword" Required="true" />
            <OutputClaim ClaimTypeReferenceId="displayName" />
            <OutputClaim ClaimTypeReferenceId="givenName" />
            <OutputClaim ClaimTypeReferenceId="surName" />
        </OutputClaims>
      </TechnicalProfile>

       <TechnicalProfile Id="SelfAsserted-LocalAccountSignin-Email">
           <Metadata>
            <Item Key="setting.showSignupLink">false</Item>
          </Metadata>
        </TechnicalProfile>
       
      </TechnicalProfiles>
    </ClaimsProvider>

我也在建筑 block 部分有它作为......

<BuildingBlocks>
    <ClaimsSchema>
      <ClaimType Id="extension_LoyaltyNumber">
        <DisplayName>Loyality-Number</DisplayName>
        <DataType>string</DataType>
        <UserHelpText>Your loyality from your membership card</UserHelpText>
      </ClaimType>
  </ClaimsSchema>
  </BuildingBlocks>

我还可以将其写入 Azure Active Directory 声明提供程序部分，如下所示

<ClaimsProvider>
      <DisplayName>Azure Active Directory</DisplayName>
      <TechnicalProfiles>
        <TechnicalProfile Id="AAD-Common">
          <Metadata>
            <!--Insert b2c-extensions-app application ID here, for example: 11111111-1111-1111-1111-111111111111-->  
            <Item Key="ClientId">11111111-1111-1111-1111-111111111111</Item>
            <!--Insert b2c-extensions-app application ObjectId here, for example: 22222222-2222-2222-2222-222222222222-->
            <Item Key="ApplicationObjectId">22222222-2222-2222-2222-222222222222</Item>
          </Metadata>
        </TechnicalProfile>

        <TechnicalProfile Id="AAD-UserWriteUsingLogonEmail">
          <PersistedClaims>
            <PersistedClaim ClaimTypeReferenceId="extension_LoyaltyNumber" />
          </PersistedClaims>
        </TechnicalProfile>

        <TechnicalProfile Id="AAD-UserReadUsingObjectId">
          <OutputClaims>
            <OutputClaim ClaimTypeReferenceId="extension_LoyaltyNumber" />
          </OutputClaims>
        </TechnicalProfile>

      </TechnicalProfiles> 
    </ClaimsProvider>

并且使用以下方法从我的网络应用程序进行重定向

public void SignUpNewUser()
        {
            if (!Request.IsAuthenticated)
            {
                var authenticationProperties = new AuthenticationProperties();
                authenticationProperties.Dictionary.Add("LoyaltyNumber", "556677");
                authenticationProperties.RedirectUri = "/";
                HttpContext.GetOwinContext().Authentication.Challenge(authenticationProperties, Startup.SignUpPolicyId);

            }
        }

用户注册自定义属性extension_LoyaltyNumber后得到的结果是{OAUTH-K:LoyaltyNumber}

不知何故，我作为查询参数传递的值 556677 没有到达此自定义属性并存储在 Azure 用户属性中

你能帮忙吗？

谢谢

Answer 1

添加

<OutputClaim ClaimTypeReferenceId="extension_LoyaltyNumber" />

到 LocalAccountSignUpWithLogonEmail。输出声明允许在后续编排步骤中使用该声明。

在 <RelyingParty>部分，将输出声明更改为以下内容，它已经解决，因此无需在此处再次解决:

<OutputClaim ClaimTypeReferenceId="extension_LoyaltyNumber" />