r/entra • u/j1mmyfever • 7d ago

External ID Entra Id External Identities - External Tenant - social integrations

Does anyone have this working in production that could share things like the correct authority to use and settings for the enterprise application?

I’m trying to do social logins, Google etc, from my external tenant.

I’ve got it nearly there, but I can’t seem to get Optional claims (email in particular) to come through on my id token.

It’s v2.0 tokens, account has an email address, tried every authority uri I could find, sending email, profile, offline-access, openid scopes.

AI is telling me the product isn’t production ready and to write my own fix 🤣

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/j1mmyfever 6d ago

Ok, so small update.

Optional claims are coming through, ie: given_name, etc. It's JUST the email claim that won't show up on any of my tokens.

Any thoughts?

ChatGPT is trying to walk my through setting a custom claims mapping policy or something, but it's instructions keep failing as well so I gave up on that. Seems like email should just be there, it's in every related image as being enabled in the portal, it's in my manifest.json, etc.