Problems with none ascii characters in Entra external ID when collecting custom user attributes during sign-up

Bardia Jedi 0 Reputation points
2025-08-05T09:46:48.0433333+00:00

Hi we are implementing oidc federation from hydra to our identity provider, where we use Swedish eid provider BankID.

The user flow and experience works great and without any issues, however we are running in to bug that could be stop the project.

The Issue is when we are collecting custom user attributes.

In cases where the Users name contains Swedish characters such as ÅÄÖ, the values that are sent to the form are send with html encoding (Å Å), So in case of test user "Åke Götesson" as display name the value in the text field is "Åke Götesson". This match the data received from page request as well:

{
    "name": "displayName",
    "value": "\u0026#197;ke G\u0026#246;tesson",
    "label": "Display Name",
    "type": "text",
    "editable": true,
    "options": {
        "regEx": "^.*"
    }
}

The major problem is that when the form is submitted the values send are still html encode, causing the server to reject the request. Update the values manually works but because we are using an eid service we'd like to make sure that personal data is preserved.

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. David Broggy 6,531 Reputation points MVP Volunteer Moderator
    2025-08-05T21:30:24.0133333+00:00

    Hi Bardia,

    Entra supports inline azure functions, have you considered that?

    Option A: Response Interceptor

      BankID → Hydra → Azure Function → Client

      Option B: Request Processor

      BankID → Azure Function → Hydra → Client

    Some references:

    API Connectors Overview - https://learn.microsoft.com/en-us/azure/active-directory-b2c/api-connectors-overview

    Secure APIs for API Connectors - https://learn.microsoft.com/en-us/entra/external-id/self-service-sign-up-secure-api-connector

    Add API Connectors to Sign-up Flows -

      https://learn.microsoft.com/en-us/azure/active-directory/external-identities/self-service-sign-up-add-api-connector

    Token Enrichment with API Connectors -

      https://learn.microsoft.com/en-us/azure/active-directory-b2c/add-api-connector-token-enrichment


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.