Managing external identities to enable secure access for partners, customers, and other non-employees
Hi @JS Arya ,
Thanks for reaching out.
Unfortunately, B2C applications do not support graph operations. If you have registered your application in B2C tenant to authenticate with user flow, you won't be able to call Microsoft graph API endpoint.
B2C application won't allow to add permission of your application which is required to call Graph API endpoints. It allows only "openid" and "offline_access" permissions which is not sufficient to call Graph API endpoints.
For now, you can use the single tenant or multi-tenant option while registering your application in B2C tenant to support standard Azure AD functionality.
To update user's password, delegated permission (Directory.AccessAsUser.All) need to add in API permissions. You can acquire the token using Authorization Code flow and use this token as bearer token to call Graph API.
Client credential flow is not supported to update user's password as application permissions are not supported to change password which require user's interaction to provide the current password.
Hope this will help.
Thanks,
Shweta
---------------------------------------
Please remember to "Accept Answer" if answer helped you.