Issue with prompt=select_account Parameter in Google OAuth2 Integration

Wichai Damalee 0 Reputation points
2024-11-25T04:09:57.4133333+00:00

Hello,

I am currently integrating Google OAuth2 authentication within my application using the following configuration:
<ClaimsProvider>

<Domain>google.com</Domain>

<DisplayName>Google</DisplayName>

<TechnicalProfiles>

<TechnicalProfile Id="Google-OAuth2">

  <DisplayName>Google</DisplayName>

  <Protocol Name="OAuth2" />

  <Metadata>

    <Item Key="ProviderName">google</Item>

    <Item Key="authorization_endpoint">https://accounts.google.com/o/oauth2/auth</Item>

    <Item Key="AccessTokenEndpoint">https://accounts.google.com/o/oauth2/token</Item>

    <Item Key="ClaimsEndpoint">https://www.googleapis.com/oauth2/v1/userinfo</Item>

    <Item Key="scope">email profile</Item>

    <Item Key="HttpBinding">POST</Item>

    <Item Key="UsePolicyInRedirectUri">false</Item>

    <Item Key="client_id">804053418488-rjthnfhiva8bmi2u6bagremmms4gr76p.apps.googleusercontent.com</Item>

    <Item Key="AdditionalRequestQueryParameters">prompt=select_account</Item>

  </Metadata>

</TechnicalProfile>
```  </TechnicalProfiles>

</ClaimsProvider>

  
However, I am encountering an issue where the `prompt=select_account` parameter does not seem to function as expected. Users are not prompted to select an account, and instead, they are redirected automatically.

Could you please provide guidance or best practices for resolving this issue or help identify if there is a correct way to configure the `prompt=select_account` parameter for Google OAuth2 in Azure AD B2C?

Thank you for your assistance.

Best regards,
Microsoft Security Microsoft Entra Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Navya 19,795 Reputation points Microsoft External Staff Moderator
    2024-11-26T17:56:20.2066667+00:00

    Hi @Wichai Damalee

    Thank you for posting this in Microsoft Q&A.

    I understand that you are trying to use the prompt=select_account parameter in the Google OAuth2 integration, but users are not prompted to select an account and are instead redirected automatically.

    As mentioned in this document, the OAuth 2.0 authorization code flow in Azure Active Directory B2C only supports prompt=login to avoid single sign-on.

    User's image

    For your reference: https://learn.microsoft.com/en-us/azure/active-directory-b2c/authorization-code-flow

    Hope this helps. Do let us know if you any further queries.

    Thanks,

    Navya.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.