Skip to main content

Notifications

Community site session details

Community site session details

Session Id : IuDVAi+RUbLqan0RuPqp4C
Power Pages - Security
Unanswered

Change Password and Name when using Azure AD B2C as Default Authentication Method

Like (0) ShareShare
ReportReport
Posted on 17 May 2024 10:17:44 by 27

Hi,

I am currently using Azure AD B2C on my Power Page website.

 

Up until now everything is fine, my users are able to do the following:

- Sign Up (With email verification Code)

- Log in

- Forget Password

 

My client asked me what if the user wants to change his password or his name ??

I think this is something which is very common in all systems and should be feasible.

 

I am using only Azure AD B2C as authentication method (I set it as Default), how to I allow the user to:

- Change his password

- Change his first name and last name

 

Without ruining all the existing functionalities

 

Hopefully one of you pro developers has come across this. Please let me know.

 

Categories:
  • Fubar Profile Picture
    7,862 Super User 2025 Season 1 on 28 May 2024 at 22:38:26
    Re: Change Password and Name when using Azure AD B2C as Default Authentication Method

    Your users Azure AD B2C password is never stored in Power Pages/Dataverse -  the only authentication method that stores a password hash is if you use Local Login. You need to think of Azure AD B2C as logging in with Facebook or Google (it is just another external identity provider, you just happen to control it as its in your domain) - you do not change your Facebook or Google password on another random site that you have logged in to (someone may provide a link to the FB or Google password change page - or embed it if that's allowed by the provider).

     

    Did follow the whole linked page - point #3 in this section of that link https://learn.microsoft.com/en-us/power-pages/security/authentication/azure-ad-b2c-provider#enter-site-settings-and-password-reset-settings-in-power-pages is where you setup the power pages side of things.  When your user is logged in and on your sites Profile Page the change password link should then take them to the B2C.

     

    In the old days you would also configure Web Templates/Page with HTML, but the documentation for this appears to no longer exist and is now based on several Site Settings (which is what that point #3 will create behind the scenes)

  • Amad233 Profile Picture
    27 on 28 May 2024 at 04:34:18
    Re: Change Password and Name when using Azure AD B2C as Default Authentication Method

    Thank you for your response.

     

    That does not answer my question though, my users already have the forget password option using the forget password flow. But that is not how any system provides a change password functionality.

     

    I need to provide the user an interface where he can change his password and remember I am only using Azure AD B2C as authentication method. Meaning that when the user changes his password it should apply both in the contact table and in the Azure B2C directory as well.


  • Fubar Profile Picture
    7,862 Super User 2025 Season 1 on 22 May 2024 at 00:24:59
    Re: Change Password and Name when using Azure AD B2C as Default Authentication Method

    The password itself is on the B2C side of things (i.e. it is not stored in Power Pages), see the Create password reset user flow in this link https://learn.microsoft.com/en-us/power-pages/security/authentication/azure-ad-b2c-provider#create-user-flows and also "Enter site settings and password reset settings in Power Pages" further down that link

     

    In Power Pages, the users First Name/Last Name is stored in their Contact record, and is able to be updated on the Profile Page, which should be under the user's name in the top right of the navigation menu (this is assuming they have a Table Privilege on the Contact table with scope = self - which should be there by default for the Authenticated Users web role). Note: depending on which template you setup your site with the Profile Page may not be obvious (there's at least one template where you have to click next to get to the profile info)

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Understanding Microsoft Agents - Introductory Session

Confused about how agents work across the Microsoft ecosystem? Register today!

Warren Belz – Community Spotlight

We are honored to recognize Warren Belz as our May 2025 Community…

Congratulations to the April Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard > Power Pages - Security

#1
Ajlan Profile Picture

Ajlan 2

#1
oliver.rodrigues Profile Picture

oliver.rodrigues 2 Most Valuable Professional

Overall leaderboard

Featured topics