【Azure 环境】中国区Azure B2C 是否支持手机验证码登录呢？

问题描述

中国区Azure B2C 是否支持手机验证码登录呢？

问题回答

在没有原生 Phone sign-up and sign-in for user flows (中国区不支持，Global Azure支持) 的情况下，可以使用B2C自定义策略实现 Phone sign-up and sign-in，测试步骤如下：步骤一：在AAD B2C tenant中, 首先需要创建两个应用程序和Policy Keys。参考教程: 创建用户流和自定义策略 - Azure Active Directory B2C（https://docs.azure.cn/zh-cn/active-directory-b2c/tutorial-create-user-flows?pivots=b2c-custom-policy）

步骤二：下载 Phone_Email_Base.xml(Link:https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/blob/main/scenarios/phone-number-passwordless/Phone_Email_Base.xml)，修改其中的 disclaimer_link_1_url, disclaimer_link_1_url, disclaimer_link_2_url

PS: 参照文档说明(Instructions)更改相应参数，修改完成后使用 Upload custom policy 进行上传

步骤三：下载 SignUpOrSignInWithPhone.xml(Link：https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/blob/main/scenarios/phone-number-passwordless/SignUpOrSignInWithPhone.xml)，修改其中的 Tenant id，修改完成后使用Upload custom policy进行上传

如无法打开Github，可以从文末附录中下载。

最后：点击Run now进行测试

手机访问页面效果为：

附录一：Phone_Email_Base.xml

User's Object's Tenant ID

string

Tenant identifier (ID) of the user object in Azure AD.

User's Object ID

string

Object identifier (ID) of the user object in Azure AD.

phoneNumber

Email Address

string

Email address of the user

Email address that can be used to contact you.

Readonly

string

Phone Number

string

Enter Phone Number

TextBox

Phone Number

string

Enter National Phone Number

TextBox

Phone Number or Email Address

string

Please enter a valid phone number or email address.

TextBox

Email Address

string

Email address of the user

Email address that can be used to contact you.

EmailBox

boolean

string

Paragraph

Country

string

Enter Country

DropdownSingleSelect

Verification Code

string

Enter your verification code

TextBox

Password

string

Enter password

Password

New Password

string

Enter new password

Password

Confirm New Password

string

Confirm new password

Password

Password Policies

string

Password policies used by Azure AD to determine password strength, expiry etc.

client_id

string

Special parameter passed to EvoSTS.

resource_id

string

Special parameter passed to EvoSTS.

Subject

string

Display Name

string

Your display name.

TextBox

boolean

nca

string

Special parameter passed for local account authentication to login.microsoftonline.com.

grant_type

string

Special parameter passed for local account authentication to login.microsoftonline.com.

scope

string

Special parameter passed for local account authentication to login.microsoftonline.com.

objectIdFromSession

boolean

Parameter provided by the default session management provider to indicate that the object id has been retrieved from an SSO session.

UPN User Name

string

The user name for creating user principal name.

UserPrincipalName

string

The user name as stored in the Azure Active Directory.

Your user name as stored in the Azure Active Directory.

Given Name

string

Your given name (also known as first name).

TextBox

Surname

string

Your surname (also known as family name or last name).

TextBox

Please enter a valid email address.

^[a-zA-Z0-9!#$%&'+^_`{}~-]+(?:\.[a-zA-Z0-9!#$%&'+^_`{}~-]+)*@(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?\.)+[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$

The value entered needs to be a phone number.

^\+?(?:[-()\s]*\d[-()\s]*){4,16}$

The national number should not include a country code.

^[^\\+]+$

Please enter a valid email address or phone number.

Please enter a valid phone number.

LineMarkers, MetaRefresh

~/tenant/templates/AzureBlue/exception.cshtml