External Identity Provider

[CodyRaffy]

When using Azure AD (not B2C) with an external identity provider how can you route users directly to a specific provider? For instance, Google is configured in the hypothetical directory as an external identity provider and you want to add a button to allow users to login directly with Google how do you go about this with this library?

In my test scenario I have Google configured as an external identity provider in an Azure AD directory. A user flow is configured in this directory to include both Azure Active Directory Sign up and Google. The Application Registration I am using for my application is added to this user flow. This setup allows me to authenticate users via both Azure AD and Google but I can not route the user directly to the google auth page using this library.

I have tried using https://login.microsoftonline.com/tfp/${tenantId}/${userFlowName}/ as my authority and the following method to initiate authentication:

msalInstance.loginRedirect({domainHint = "google.com"});
but I still get the basic login screen and am not directed to the google only authentication page. The user can navigate themselves to the google auth screen and login with google but this seems non ideal if they are already selecting google as their authentication method within my application before I use this library to attempt to authenticate.

Does anyone know how to use this library to route a user directly to the google auth screen in this scenario?

[jasonnutter]

To clarify, you are interesting in bypassing the the first step of this flow?

Source: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/google-federation

[CodyRaffy]

Correct. I am looking for a way to route users directly to the step in the flow after they click Sign in with Google button from the image above. I have this need because the user has already selected they want to log in with google and it seems wrong to ask them to specify again in the Azure AD flow.

[jasonnutter]

@CodyRaffy Unfortunately, that is not currently possible. I have raised this feedback internally.

[CodyRaffy]

Thank you for the response and for raising this feedback with the group.