I migrate users from ADB2C to Auth0. I added getuser and login script to the database connection that return a user object with app_metatdata that contain the settings from the legacy IDP (ADB2C)
The following cases work as expected:
- User logs in with credentials fron legacy IDP
- User resets password as he has forgotten the password from the legacy IDP-
In both cases the user is created with the corresponding app_metadata.
Password breach is enabled on our tenant as it is mandatory in our company.
So the third option is:
User wants to log in. He gets a error message (Please reset password..) as he is using a breached password.
After password reset the user is created but the app_metadata are empty.
In the working cases “getuser” script is executed several times.
But in the case with the breached password “getuser” is executet only once (during the firts login attempt) but it is not executed during the password change.
We use password change with code. (if that is important)
To sum up:
- When i reset the Passwort the migration works as expected
- When i first try to log in with a breached password and reset the password afterwards the second call of the “getuser” script is missing and therefore the app_metadata are missing.