Pre-populate email and make it read only - Azure ADB2C custom policy

Arianit Krasniqi 0 Reputation points
2025-10-21T14:56:15.6566667+00:00

Hello.

First of all, there is no adequate tag for this category. I couldn't find any that gets close. Anyway. To my question:
Scenario: the user will get an invite link, which the admin triggers. The link will navigate the user to "change password" dialog with Azure ADB2C, where the user finishes the registration by giving a new password to the account. I am trying to pre-populate the the email field and set it to read-only.

I set up everything in the Azure part, the applications IdentityExperienceFramework and ProxyIdentityExperienceFramework.

I uploaded the TrustFrameworkBase.xml, which I got from the starter repo.


    

Uploading it works fine.

But when I try to upload the TrustFrameworkExtensions.xml then things get complicated. I tried different fixed suggested by other github projects, tutorials and copilot, and every time it gives me a different but similar error when I try to upload it.

This is my current TrustFrameworkExtensions.xml validation:


    

For this particular validation this is the error I get when trying to upload it:

Upload custom policy 
Validation failed: 2 validation error(s) found in policy 
"B2C_1A_TRUSTFRAMEWORKEXTENSIONS" of tenant 
"mydevtenant.onmicrosoft.com".The following 
error occurred in orchestration step 1 in user journey 
"PasswordResetJourney" in policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com": Policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com" makes a 
reference to TechnicalProfile With id "SelfAsserted-Email" 
but neither the policy nor any of its base policies contain 
such an element.The following error occurred in 
orchestration step 1 in user journey 
"PasswordResetJourney" in policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com": Policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com" makes a 
reference to TechnicalProfile With id "SelfAsserted-Email" 
but neither the policy nor any of its base policies contain 
such an element.The following error occurred in 
orchestration step 1 in user journey 
"PasswordResetJourney" in policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com": Policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com" makes a 
reference to TechnicalProfile With id "SelfAsserted-Email" 
but neither the policy nor any of its base policies contain 
such an element.The following error occurred in 
orchestration step 1 in user journey 
"PasswordResetJourney" in policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com": Policy 
"B2C_1A_TrustFrameworkExtensions" of tenant 
"mydevtenant.onmicrosoft.com" makes a 
reference to TechnicalProfile With id "SelfAsserted-Email" 
but neither the policy nor any of its base policies contain 
such an element. 

I have tried many approaches and this is the recent one I've tried. There is also the PasswordReset.xml but I haven't gotten there yet.

The policy is for the Local Accounts.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.