Additional settings for OAuth 2.0 providers

Add an OAuth 2.0 provider to your Power Pages site to allow visitors to authenticate using a Microsoft, LinkedIn, Facebook, Google, or Twitter account. After you enter the specific client ID and client secret for your identity provider, you may need to change other settings that apply to any OAuth 2.0 provider. These settings are optional and you should change them only if you know what you're doing.

To change the other settings for an OAuth 2.0 identity provider, edit the provider settings and expand the Additional settings section.

Screenshot of optional additional settings for OAuth 2.0 providers.

Setting Description
Authentication type The OWIN authentication middleware type
Authentication mode The OWIN authentication middleware mode
Backchannel timeout The timeout value in milliseconds for back-channel communications
Callback path The request path in the application's base path where the user-agent is returned
Sign in As authentication type The name of another authentication middleware that's responsible for issuing a user claims identity
Scope A comma-separated list of permissions to request
Registration enabled Turns on or off the provider's registration requirement. When this setting is off, users are denied registration with an error if no contact record exists for them. When this setting is on, users can register only if the site setting Authentication/Registration/Enabled is set to true.
Contact mapping with email Specifies whether contacts are mapped to a corresponding email. When this setting is on, it associates a unique contact record with a matching email address, and then automatically assigns the external identity provider to the contact after the user successfully signs in.

See also

Set up an OAuth 2.0 identity provider