Add signing and encryption keys
Create the signing key
- On the Azure AD B2C page, under Policies, select Identity Experience Framework.
- Select Policy Keys and then select Add.
- For Options, choose Generate.
- In Name, enter
TokenSigningKeyContainer
. The prefixB2C_1A_
may be added automatically. - For Key type, select RSA.
- For Key usage, select Signature.
- Select Create.
Create the encryption key
- On the Azure AD B2C page, under Policies, select Identity Experience Framework.
- Select Policy Keys and then select Add.
- For Options, choose Generate.
- In Name, enter TokenEncryptionKeyContainer. The prefix
B2C_1A_
may be added automatically. - For Key type, select RSA.
- For Key usage, select Encryption.
- Select Create.
For more information, see Tutorial: Create user flows and custom policies in Azure Active Directory B2C in the Microsoft Azure documentation.