Additional settings for OAuth 2.0 providers

Add an OAuth 2.0 provider to your Power Pages site to allow visitors to authenticate using a Microsoft, LinkedIn, Facebook, Google, or Twitter account. After you enter the specific client ID and client secret for your identity provider, you may need to change other settings that apply to any OAuth 2.0 provider. These settings are optional and you should change them only if you know what you're doing.

To change the other settings for an OAuth 2.0 identity provider, edit the provider settings and expand the Additional settings section.

Setting	Description
Authentication type	The OWIN authentication middleware type
Authentication mode	The OWIN authentication middleware mode
Backchannel timeout	The timeout value in milliseconds for back-channel communications
Callback path	The request path in the application's base path where the user-agent is returned
Sign in As authentication type	The name of another authentication middleware that's responsible for issuing a user claims identity
Scope	A comma-separated list of permissions to request
Registration enabled	Turns on or off the provider's registration requirement. When this setting is off, users are denied registration with an error if no contact record exists for them. When this setting is on, users can register only if the site setting Authentication/Registration/Enabled is set to true.
Contact mapping with email	Specifies whether contacts are mapped to a corresponding email. When this setting is on, it associates a unique contact record with a matching email address, and then automatically assigns the external identity provider to the contact after the user successfully signs in.

See also

Set up an OAuth 2.0 identity provider