openid - Skip IdentityServer3 login screen -
we have configured client app use identityserver3 authentication via openid connect protocol (it's asp.net mvc app uses owin middleware support oidc).
the identityserver3 configured use both local login , external login (azure ad, instance).
in regular flow once app need authenticate user redirects him identityserver3 login screen - it's fine. in cases, on per-request basis, want bypass login screen somehow letting identityserver3 know user want login specific external identity provider right away.
is possible do?
just found solution in identityserver3's authorization/authentication endpoint documentation!
acr_values (optional) allows pass additional authentication related information user service - there values special meaning: idp:name_of_idp bypasses login/home realm screen and forwards user directly selected identity provider (if allowed per client configuration) tenant:name_of_tenant can used pass tenant name user service
how pass additional parameters using owin openid connect middleware: https://katanaproject.codeplex.com/workitem/325
here sample of authorization request:
Comments
Post a Comment