Hi all,
We are implementing Azure AD B2C as Sign In option for a portal.
We have the invitation process implemented, where the new contact is automatically assigned to a Web Role "A" when the invitation is redeemed.
This web role "A" has exclusive permission to a few pages when the user is signed in.
The problem we're facing now is when someone self-register through Azure AD B2C (no invitation): the contact is created with NO web roles, and yet is able to access those pages that are restricted to only be accessed by contacts with web role "A".
Does anyone know why it's behaving like this? Is there any solution?
PS: the best of all worlds would be disable the self-registration, but from what I researched in the web, this is not possible. Unless someone know somehow?
Thanks,
Guilherme
