External Identity Provider

(0) Share

Report

Posted on by Fredrik_B

Hello!

I have some questions regarding the setup of an external identity provider.

When configuring an external IDP(OpenID Connect in this case), is there any way to set contact association to another field than e-mail? I would like to set this to a custom field in the CRM, and a claim that is returned in the token provided by the IDP, so if the values match the external identity is associated with the existing contact.

I'm also having issues with the claims mapping as it seems no matter which fields/claims I try to map, the contacts won't be updated on login. Writing the claims mapping as suggested: "logicalName1=claim1,logicalName2=claim2" etc. has anyone else experienced this? I'm using the authorization code flow, but I'm not sure if that matters.

Thank you in advance!

Categories:

Power Apps portals

All responses (3)

Answers (1)

Sort by

OOlashyn 3,498 Most Valuable Professional on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @Fredrik_B ,

Unfortunately, you cannot use a custom claim for contact mapping. Regarding claim mapping - can you check id token that you receive and see if the fields you specified are present there? Also what claim mapping you are using - registration claims mapping or login claims mapping?
Fredrik_B 5 on at

Like
a
(0)

Report
Copy link

Link copied!

Thank you for your reply!

Looking at the id token I do see the claim that I'm trying to map. Both the registration and login claims mapping is set up identical. I've only set them up to map one field/claim-pair at the moment, seeing how it is not working I did this to reduce error sources.

Could it be because the identity provider is set up with response type "Code" and only code, that is causing the issue?
Verified answer

OOlashyn 3,498 Most Valuable Professional on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @Fredrik_B ,

Good question. Honestly, I don't know what exactly you need to configure on the IdP side if any to receive a proper response. But if you see claims in the token that should be enough for claims mapping. I would advise you to open a support ticket with MS as it might some sort of a bug.