
We have configured a provider using "OpenID Connect".
To make it work, we have configured a registration app, which we have previously accepted permissions with a global administrator of other tenants, so that it can read the domain users of those other tenants and authorize logins.
With this "OpenID Connect" we get that our portal also trusts that application and is able to make and take advantage of the login, thus achieving the silent login.
Now, as my colleague commented, when you log in for the first time it asks for an invitation code. Once this invitation code is redeemed, an "External identity" is generated in the contact entity so that if the contact accesses again, I can log in without any problem. The action of redeeming an invitation code generates in the contact the "External identity" with the following fields:
The field "Identity Provider" we know how it is generated, because at the end it is the same URL, but with the Tenant ID of the person who is logging in.
The problem is with the field "User Name", which generates an alphanumeric, which for each user is different, but whenever it is generated, it always generates the same, that is, I always have the code that begins with 6z-DY-2a... and another colleague has another, but always gives us the same.
That said, what we want is to try to know how to get that code that must be reported in "User name", so we can create ourselves these records of "External identity" and be able to leave configured access, without the user having to enter anything.
Hi @shiongo ,
External Identity is used to allow multiple ways to login to Power Pages. When the record is created it identifies the identity provider and unique identifier from the said provider (ie username) usually by claims or subclaims in the id token. You can find more about the username in this official FAQ about OIDC in Power Pages.