Azure-docs: Is B2C still unsupported?

[markarnolditpro]

I could have sworn that B2C now supports MSAL 2.0 for auth code + PKCE. Yet the highlight above suggests otherwise. Please confirm. Thanks

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: cff30850-fbce-1c4d-8979-561e84b09c78
• Version Independent ID: ad8742e7-a4c7-5b1a-1b68-dc7c14edc3ac
• Content: JavaScript single-page app tutorial - auth code flow - Microsoft identity platform
• Content Source: articles/active-directory/develop/tutorial-v2-javascript-auth-code.md
• Service: active-directory
• Sub-service: develop
• GitHub Login: @hamiltonha
• Microsoft Alias: hahamil

[shashishailaj]

@markarnolditpro Thank you for your feedback . We will investigate and update the thread.

[amanmcse]

@markarnolditpro PKCE is not supported specifically with MSAL.js in B2C as of now. It is however supported in B2C in general. Using other language such as MSAL.net you can use PCKE but not with MSAL.js.

[hamiltonha]

@markarnolditpro we are working on a fix to the B2C endpoint to support CORS for the auth code flow with PKCE. We hopefully will have this deployed in the next few weeks.

[amanmcse]

@hamiltonha Thank you for the udpate. @markarnolditpro Closing the issue now.

[LarsKemmann]

@hamiltonha Can you share an update on this? We have a couple of customers wanting to adopt B2C and needing to use the PKCE flow for their SPAs due to Safari browser restrictions.

[hamiltonha]

@LarsKemmann you should be able to test with a B2C app now so long as you are using PKCE (please let me know if you run into any issues now), but I wouldn't recommend using in production until a fix goes out next week on the b2c side to enforce pkce

[LarsKemmann]

I actually ran a test last night -- so far so good! Thanks so much for the update!