Repository navigation
|
I'm using Google and Microsoft as external identity provider. I want to send the claims parameter only if the user selects the Google provider. |
Replies: 1 comment 1 reply
|
There is no separate generic SPI between IdP selection and redirect. You should not need a provider-specific callback here:
The note may exist for the whole authentication session, but only the selected provider whose configuration lists If the value itself must be calculated after provider selection, that requires a custom OIDC identity-provider implementation overriding |
|
Thanks for your explanations although I feared your answer. As long as I don't have different claims I need for both it will work. |
There is no separate generic SPI between IdP selection and redirect.
performLogin()immediately builds the provider URL throughcreateAuthorizationUrl(), which then appends that provider's configured forwarded parameters.You should not need a provider-specific callback here:
claimsclient note in your existing authenticator.claimsonly on the Google IdP.claimson the Microsoft IdP.The note may exist for the whole authentication session, but only the selected provider whose configuration lists
claimswill copy it into its authorization URL. Microsoft therefore will not receive it.If the value itself must be calculated after …