Extensions app in Azure AD B2C

  • Article

When an Azure AD B2C directory is created, an app called b2c-extensions-app is automatically created inside the new directory. This app is visible in App registrations. It is used by the Azure AD B2C service to store information about users and custom attributes. If the app is deleted, Azure AD B2C will not function correctly and your production environment will be affected.

Important

Do not delete the b2c-extensions-app unless you are planning to immediately delete your tenant. If the app remains deleted for more than 30 days, user information will be permanently lost.

Verifying that the extensions app is present

To verify that the b2c-extensions-app is present:

  1. Inside your Azure AD B2C tenant, click on All services in the left-hand navigation menu.
  2. Search for and open App registrations.
  3. Look for an app that begins with b2c-extensions-app

Recover the extensions app

If you accidentally deleted the b2c-extensions-app, you have 30 days to recover it.

Note

An application can only be restored if it has been deleted within the last 30 days. If it has been more than 30 days, data will be permanently lost. For more assistance, file a support ticket.

Recover the extensions app using Microsoft Graph

To restore the app using Microsoft Graph, you must restore both the application object and the service principal. For more information, see the Restore deleted item API.

To restore the application object:

  1. Browse to https://developer.microsoft.com/en-us/graph/graph-explorer.
  2. Sign in to the site as a Application Administrator for the Azure AD B2C directory that you want to restore the deleted app for.
  3. Issue an HTTP GET against the URL https://microsoftgraph.chinacloudapi.cn/v1.0/directory/deleteditems/microsoft.graph.application. This operation will list all of the applications that have been deleted within the past 30 days. You can also use the URL https://microsoftgraph.chinacloudapi.cn/v1.0/directory/deletedItems/microsoft.graph.application?$filter=displayName eq 'b2c-extensions-app. Do not modify. Used by AADB2C for storing user data.' to filter by the app's displayName property.
  4. Find the application in the list where the name begins with b2c-extensions-app and copy its id property value.
  5. Issue an HTTP POST against the URL https://microsoftgraph.chinacloudapi.cn/v1.0/directory/deleteditems/{id}/restore. Replace the {id} portion of the URL with the id from the previous step.

To restore the service principal object:

  1. Issue an HTTP GET against the URL https://microsoftgraph.chinacloudapi.cn/v1.0/directory/deleteditems/microsoft.graph.servicePrincipal. This operation will list all of the service principals that have been deleted within the past 30 days. You can also use the URL https://microsoftgraph.chinacloudapi.cn/v1.0/directory/deletedItems/microsoft.graph.servicePrincipal?$filter=displayName eq 'b2c-extensions-app. Do not modify. Used by AADB2C for storing user data.' to filter by the app's displayName property.
  2. Find the service principal in the list where the name begins with b2c-extensions-app and copy its id property value.
  3. Issue an HTTP POST against the URL https://microsoftgraph.chinacloudapi.cn/v1.0/directory/deleteditems/{id}/restore. Replace the {id} portion of the URL with the id from the previous step.

You should now be able to see the restored app in the Azure portal.