How do I get Address and PhoneNumber from a Microsoft Account login?

[DavidThielen]

Hi all;

I am using the ASP.NET Core Identity library for my Authentication & Authorization. I've added login using Microsoft or Google accounts and that all works fine.

I'm now trying to get the user's address and phone number if they log in using their Microsoft Account. I've followed the instructions in Microsoft Account external login setup with ASP.NET Core.

I've added the following to my Program.cs:

var microsoftClientId = configMgr.GetValue<string>("Authentication:Microsoft:ClientId");
var microsoftClientSecret = configMgr.GetValue<string>("Authentication:Microsoft:ClientSecret");
// Add authentication services
if ((!string.IsNullOrEmpty(microsoftClientId)) && !string.IsNullOrEmpty(microsoftClientSecret))
	{
	auth.AddMicrosoftAccount(options =>
		{
			options.ClientId = microsoftClientId;
			options.ClientSecret = microsoftClientSecret;
			options.Scope.Add("User.Read");
			// tried both ways
			options.Scope.Add("https://graph.microsoft.com/user.readbasic.all");
			options.Scope.Add("https://graph.microsoft.com/user.read.all");
			options.Scope.Add("User.ReadBasic.All");
			options.Scope.Add("User.Read.All");
			options.Scope.Add("User.ReadWrite.All");
			options.Scope.Add("Contacts.Read");
			options.Scope.Add("Contacts.ReadWrite");
			options.ClaimActions.MapJsonKey(ClaimTypes.MobilePhone, "mobilephone");
			options.ClaimActions.MapJsonKey(ClaimTypes.StreetAddress, "streetaddress");
			options.ClaimActions.MapJsonKey(ClaimTypes.StateOrProvince, "state");
		});
}

I set the API permissions adding User.Read.All to the configured permissions. I am guessing I was supposed to do this.

When I go to approve logging in using my Microsoft Account, it does tell me it wants access to me address, phone, etc. And if I remove the Scope.Add() calls, it does not tell me it wants the address, phone, etc. So that part is working. It's just not passing that info to the Principal.Claims.

1. Is there anything else I'm supposed to set?
2. Is there a process where I ask Microsoft to review and bless this api login? I ask because Google has an approval process to use their login.

When it calls OnGetCallbackAsync() in ExternalLogin.cshtml.cs the Principal.Claims is the same standard id, name, email. No address or phone number.

??? - thanks - dave