azure-ad-b2c - B2C - "Invalid password"有效时

Question

我试图在不添加本地帐户注册的情况下将本地帐户登录添加到我的自定义策略中。我已经创建了一个本地帐户注册策略并使用它来创建一个本地帐户。现在，如果我将这些凭据放入我的自定义策略中，它就不起作用，但我得到的唯一错误是“密码无效”。如果我在我的内置本地帐户策略中输入相同的凭据，它会让我登录。

我什至在我的自定义策略中添加了注册支持，删除了我的用户，通过自​​定义策略注册，并尝试使用我刚刚创建的凭据登录:它仍然显示“密码无效”。我该如何进一步解决这个问题？我已经连接了应用洞察，但输出不是很有用。

{
  "Kind": "HandlerResult",
  "Content": {
    "Result": false,
    "RecorderRecord": {
      "Values": [
        {
          "Key": "Validation",
          "Value": {
            "Values": [
              {
                "Key": "SubmittedBy",
                "Value": null
              },
              {
                "Key": "ProtocolProviderType",
                "Value": "SelfAssertedAttributeProvider"
              },
              {
                "Key": "TechnicalProfileEnabled",
                "Value": {
                  "EnabledRule": "Always",
                  "EnabledResult": true,
                  "TechnicalProfile": "login-NonInteractive"
                }
              },
              {
                "Key": "ValidationTechnicalProfile",
                "Value": {
                  "Values": [
                    {
                      "Key": "TechnicalProfileId",
                      "Value": "login-NonInteractive"
                    },
                    {
                      "Key": "MappingDefaultValueForClaim",
                      "Value": {
                        "PartnerClaimType": "client_id",
                        "PolicyClaimType": "client_id"
                      }
                    },
                    {
                      "Key": "MappingDefaultValueForClaim",
                      "Value": {
                        "PartnerClaimType": "resource",
                        "PolicyClaimType": "resource_id"
                      }
                    },
                    {
                      "Key": "MappingPartnerTypeForClaim",
                      "Value": {
                        "PartnerClaimType": "username",
                        "PolicyClaimType": "signInName"
                      }
                    },
                    {
                      "Key": "MappingPartnerTypeForClaim",
                      "Value": {
                        "PartnerClaimType": "password",
                        "PolicyClaimType": "password"
                      }
                    },
                    {
                      "Key": "MappingDefaultValueForClaim",
                      "Value": {
                        "PartnerClaimType": "grant_type",
                        "PolicyClaimType": "grant_type"
                      }
                    },
                    {
                      "Key": "MappingDefaultValueForClaim",
                      "Value": {
                        "PartnerClaimType": "scope",
                        "PolicyClaimType": "scope"
                      }
                    },
                    {
                      "Key": "MappingDefaultValueForClaim",
                      "Value": {
                        "PartnerClaimType": "nca",
                        "PolicyClaimType": "nca"
                      }
                    }
                  ]
                }
              },
              {
                "Key": "Exception",
                "Value": {
                  "Kind": "Handled",
                  "HResult": "80131500",
                  "Message": "Invalid username or password.",
                  "Data": {}
                }
              }
            ]
          }
        }
      ]
    },
    "Statebag": {
      "Complex-CLMS": {},
      "ComplexItems": "_MachineEventQ, REPRM, TCTX, S_CTP, M_EXCP"
    },
    "Exception": {
      "Kind": "Handled",
      "HResult": "80131500",
      "Message": "Invalid username or password.",
      "Data": {}
    },
    "PredicateResult": "False"
  }
},

Answer 1

确保将正确的 ID 分配给 TrustFrameworkExtensions.xml 中的正确项目

我交换了 ID，因为我认为它们的顺序应该与 created in 相同.

<Metadata>
    <Item Key="client_id">ProxyIdentityExperienceFrameworkAppId</Item>
    <Item Key="IdTokenAudience">IdentityExperienceFrameworkAppId</Item>
</Metadata>
<InputClaims>
    <InputClaim ClaimTypeReferenceId="client_id" DefaultValue="ProxyIdentityExperienceFrameworkAppId" />
    <InputClaim ClaimTypeReferenceId="resource_id" PartnerClaimType="resource" DefaultValue="IdentityExperienceFrameworkAppId" />
</InputClaims>