OpenID Connect does not work with Azure AD B2C

Please note that this Fast Track applies to versions before our Quarterly Release 2024.Q1. From Quarterly Release 2024.Q1 on, this function is enabled as described in LPD-9397. Please refer to Using OpenID Connect for more information.

Issue

• OpenId Connect (OIDC) authentication does not work with Azure AD B2C as the B2C provided JWT Token does not contain the expected OIDC payload.

Environment

• Liferay DXP 7.0
• Liferay DXP 7.1
• Liferay DXP 7.2
• Liferay DXP 7.3

Resolution

• Azure AD B2C can be configured to provide an "access_token" containing the expected payload for OpenID Connect authentication: https://docs.microsoft.com/en-us/azure/active-directory-b2c/openid-connect#get-a-token. This has not been tested as compatible with Liferay, but feel free to explore this solution at your own discretion.

Additional Information

• Azure AD B2C is not present on the Liferay Compatibility Matrices or the Liferay DXP Integrated Technologies Compatibility Matrix, as a result of that there may be unexpected behaviors when utilizing Azure AD B2C which Liferay Support would be limited in assisting with.
  
  • This does not preclude using Azure AD B2C with Liferay DXP however it is useful to keep in mind.
• An enhancement ticket has been created to update the OpenID Connect integration to accommodate the data that Azure AD B2C provides out of the box: https://issues.liferay.com/browse/LPS-131528