Identityserver4.admin: How to forward claims from Azure AD through IS4

[brattpurrie]

When using IS4 combined with AzureAD, I would like that when a user logs in from a SPA client, he receives the AzureAD email address. Currently, there is an in-between screen that requires the user to insert an email address again. is there a way to map claims from azureAD to IS4?

requested scope: openid profile email

IS4 asking to fill in the email address:

IS4 configuration

if (externalProviderConfiguration.UseAzureAdProvider)
            {
                authenticationBuilder.AddOpenIdConnect("aad", "Login with Azure AD", options =>
                {
                    options.Authority = externalProviderConfiguration.AzureADAuthority;
                    options.ClientId = externalProviderConfiguration.AzureADClientId;
                    options.CallbackPath = "/signin-oidc";
                });
            }

[tomadj]

Hello,

I do like this :

var email = info.Principal.FindFirstValue(ClaimTypes.Email) ??
                        info.Principal.FindFirstValue(ClaimTypes.Name);

return View("ExternalLoginConfirmation", new ExternalLoginConfirmationViewModel { Email = 
        email });

[skoruba]

Thanks @tomadj 👍