how to use graph api / sdk with AD B2C - asp.net-mvc

Question

I am trying to simply create a user using Graph API sdk against my AD B2C tenant but I keep running into issues. I am following the documentation here: https://learn.microsoft.com/en-us/graph/api/user-post-users?view=graph-rest-1.0&tabs=csharp
The first error I received was that “the domain portion of the userPrincipalName property is invalid. You must use one of the verified domain names in your organization”. After looking around, I found this document that states that the CreationType property must be set to "LocalAccount". When I tried that, I got the error that “one or more properties contains invalid values.”
The error doesn't give any details as to which property is invalid! Can someone at Microsoft please point me to an appropriate document of how to get this working? It seems that there might be some confusion in the documentation where the API is possibly targeting AD as opposed to AD B2C. But I do not have an AD tenant, just an AD B2C tenant, and that's what I am targeting. Again, I am using the latest version of the SDK.

Answer 1

I was able to figure out the issue. For AD B2C, I am supposed to attach an ObjectIdentity to the User object I am passing to be created.
Below is the code:
var identity = new ObjectIdentity
{
Issuer = Globals.Tenant,
IssuerAssignedId = email,
SignInType = "emailAddress"
};
var graphClient = GetGraphServiceClient();
var user = new User
{
DisplayName = fullName,
PasswordProfile = new PasswordProfile
{
Password = password,
ForceChangePasswordNextSignIn = forceChangePasswordSignIn
},
PasswordPolicies = "DisablePasswordExpiration",
AccountEnabled = enabled,
CreationType = "LocalAccount",
Identities = new ObjectIdentity[] { identity }
};
var userInfo = await graphClient.Users.Request().AddAsync(user);
return userInfo;