Unanswered

Microsoft LogIn Unable to authenticate with external account provider.

(0) Share

Report

Posted on by Community Power Pla...

Hello,

I'm configuring a Microsoft APP to do the authentification process with Microsoft accounts for my Power Portal.

I don't allow to register new users, i only want to let in the customers that have email or microsoft account in my CRM.

I already follow the Microsoft documentation:

1. I've created the microsoft app, and the secret id.

2. I've chained the two platforms throught redirection URL, Client id and Secret id.

3. I set permisions like that:

I have a google authentification option too and it's working.

But when i try to log in throught my Microsoft option:

I can Log in, but when my first page after that:

Unable to authenticate with external account provider.

Anyone can help me?

Thank You!

pd: I have the option for external Log in.

Categories:

General

Tips & Tricks

All responses (3)

Answers (0)

Jcook 7,779 Most Valuable Professional on at

Like (0)

Report

Re: Microsoft LogIn Unable to authenticate with external account provider.

@Anonymous @Steve0 ,

Docs are wrong, you dont copy the ID you copy the Secret value.

Create a new secret and copy the value (the one that is hidden after you leave leave the page)
Steve0 Microsoft Employee on at

Like (0)

Report

Re: Microsoft LogIn Unable to authenticate with external account provider.

I am getting the same thing, did you solve this?
Christian Leverenz 1,214 on at

Like (1)

Report

Re: Microsoft LogIn Unable to authenticate with external account provider.

@Anonymous ,

basically, users in portals/power pages are contacts. So, for each "login" there has to be a contact. Roles with the tablepermissions are set and assigned to a contact.

When using external authentication, another table is filled, which relates the external id with the conact. I think, the name of the table is somethinfg like external Identities. Its a 1-n relation from thecontacts and can be seen from there. For each external login, there has to be an entry in that table with a lookup to the contact (ok, obvious), the id od the external provider, usually something like https://account.microsoft.com/<tenantid> or so. And the userid in the foreign system. Usally (but can be anything) a guid sent along with the token. Not sure, which claim is used from the token, i forget this always 🙂

And the contact has to be portal enabled.

When all theses conditions are met, the external authentication will select the correct contact.

Usually, when signing up with an external identity, the contact can be generated and directly linked to the external provider.

A lot of text, sorry for that.

Hope it helps,

Christian