How do I expose a custom API permission in Azure B2C? Only admins are supported

Question

I'm following the B2C directions here to secure my API, however the Azure B2C portal doesn't expose this feature fully. Instead it only allows for Admin consent, not user consent.

image of portal missing end user prompts

• Is this feature fully supported?

• Why would there be an admin scope and not an end user scope?

• What scenarios is this custom permission expected to be used within, and am I trying to do something unexpected with B2C?

Answer 1

If you are configure this sample with your Azure AD B2C, you should follow this README file rather than B2C directions here.

The link you are following is not for Azure AD B2C. It should be for Azure AD.

I'm not sure why it's put into this path. Have opened an issue here.

Based on Add a web API application to your Azure Active Directory B2C tenant, user consent is not mentioned. I think it's not supported currently.