OIDC Custom Scope/Claim

Like (0) Share

Report

Posted on 31 Dec 2024 17:55:01 by MH-31121739-0

Very new to the PowerPlatform and we have a PowerPages app that connects to Okta for authentication via OIDC. It works fine when we request scopes "openid email profile" but when we try to fetch an additional custom scope "openid email profile customscopename" the PowerPages app does not redirect to our IDP (Okta) and gives an error "external authentication error". The custom scope retuns the custom claims just fine when we do tests outside of PowerPages. Does PowerPages allow for the use of custom scopes and if so what might be the issue? Is there somewhere we can check logs to get more error details related to the "external authentication error" that displays on the app loging screen in PowerPages?

Categories:

General

All responses (1)

Answers (1)

Verified answer

oliver.rodrigues 9,242 Most Valuable Professional on 02 Jan 2025 at 09:28:01

Like (3)

Report

OIDC Custom Scope/Claim

I haven't done that myself, however according to the documentation, this should be supported.

https://learn.microsoft.com/en-us/power-pages/security/authentication/openid-faqs#does-power-pages-support-custom-scope-parameters-in-authentication-requests

My first guess here would be to open a support ticket so Microsoft can investigate on their end what might be happening.

You can enable diagnostic error logging, but I am not sure it would get to the level that you are looking for: https://learn.microsoft.com/en-us/power-pages/admin/view-portal-error-log#enable-diagnostic-logging