Contrib.social

Add support for the `domain_hint` parameter

Open on Drupal.org →
Created on 8 November 2023, 12 months ago
Updated 26 July 2024, 3 months ago

Problem/Motivation

The domain_hint is implemented by the Microsoft Azure AD B2C OpenID Connect Provider. This helps the Azure AD B2C server determine which login method to delegate to and prevents the user from having to click this again. This makes the process smoother in case of provider initiated logins.

While not in the OpenID Spec itself, Microsoft Azure AD B2C is a common implementation of OpenID to delegate access in enterprise environments and this hint can be a requirement for implementations.

Steps to reproduce

Proposed resolution

The domain_hint is provided by the provider and forwarded back to it during the authentication process in the same way as the login_hint parameter.

In de OpenIDConnectRedirectController::initiate forward the query parameter if it's available just like we do for other hints.

Remaining tasks

User interface changes

API changes

Data model changes

✨ Feature request
Status

Needs review

Version

3.0

Component

Code

Created by

🇳🇱Netherlands kingdutch

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024