OIDC Custom Scope/Claim

(0) Share

Report

Posted on by MH-31121739-0

Very new to the PowerPlatform and we have a PowerPages app that connects to Okta for authentication via OIDC. It works fine when we request scopes "openid email profile" but when we try to fetch an additional custom scope "openid email profile customscopename" the PowerPages app does not redirect to our IDP (Okta) and gives an error "external authentication error". The custom scope retuns the custom claims just fine when we do tests outside of PowerPages. Does PowerPages allow for the use of custom scopes and if so what might be the issue? Is there somewhere we can check logs to get more error details related to the "external authentication error" that displays on the app loging screen in PowerPages?

Categories:

General topics

I have the same question (0)

All responses (1)

Answers (1)

Verified answer

oliver.rodrigues 9,368 Most Valuable Professional on at

Like (3)

Report

OIDC Custom Scope/Claim

I haven't done that myself, however according to the documentation, this should be supported.

https://learn.microsoft.com/en-us/power-pages/security/authentication/openid-faqs#does-power-pages-support-custom-scope-parameters-in-authentication-requests

My first guess here would be to open a support ticket so Microsoft can investigate on their end what might be happening.

You can enable diagnostic error logging, but I am not sure it would get to the level that you are looking for: https://learn.microsoft.com/en-us/power-pages/admin/view-portal-error-log#enable-diagnostic-logging

Was this reply helpful? Yes No