Is it possible to restrict invite codes to specific emails with Azure B2C?

(0) Share

Report

Posted on by arpost

466

Greetings, community. I am curious if anyone knows of a way to make it so that a user with an Invite code has to create an Azure B2C account using a specific email associated with the invite. Basically, I want to allow Azure B2C registration without allowing just anyone to create an Azure B2C account. I also want to ensure that users can't just use any email they choose for security reasons.

So if we create an invite code for John Smith at jsmith@company.com, we want him to redeem the code and then be taken to Azure B2C to create his account.
We only want him to be able to create an account in Azure B2C using jsmith@company.com.
If John Smith tries to create an account with his personal email (js@email.com), we want him prevented from doing so as the invite is only good for jsmith@company.com.

Does anyone have suggestions or thoughts?

Categories:

Security

I have the same question (0)

All responses (1)

Answers (0)

Fubar 8,510 Super User 2026 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Not really. Others may have other suggestions, but one thing you could do is create the B2C user from your data in Dataverse before you send the Invitations (can be done via custom code or using Flow) using the Graph API. Or instead of the invitations create the B2C and the External Identity record in Dataverse for it, and set some additional fields on the Contact record (e.g. Security Stamp with any guid, Login Enabled to Yes) and send them a temporary password (or setup B2C for one time passcode) in an email.

Was this reply helpful? Yes No