Skipping Login Process and Directly Invoking MFA in Azure AD B2C from My Web App

I have an Angular application that communicates with a .NET Core Web API, which in turn interacts with an MS SQL Server database.

Current Flow: Currently, when I enter my email and password on the login page, the application calls the Web API, which then checks the user credentials in the SQL Server's user table. If the credentials are valid, the user is redirected to the home page.

Expected Flow: I would like to integrate Azure AD B2C for Multi-Factor Authentication (MFA) in my web app. Specifically, I want to skip the login process (since the user is already logged in through the web app) on the URL https://.b2clogin.com and directly invoke the MFA user interface.

Is it possible to achieve this with Azure AD B2C when calling a REST API?

Any guidance on how to properly configure and implement this would be greatly appreciated.

Thank you!

https://i.sstatic.net/53GncIIH.png

What I've Tried: Following the Azure documentation, I attempted to configure Azure AD B2C custom policies by downloading the starter pack from https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack. I made the necessary changes to the XML files in the LocalAccounts folder (please see the attached screenshot). However, I am still unclear about how the process works, and it is not functioning as expected.

Continue reading...