Skip to content

Allow Setting Additional Parameters on OAuth URLs Dynamically #13952

@stephanrenggli

Description

@stephanrenggli

Is your feature request related to a problem? Please describe.

I would like to add things like login_hint to the OAuth url dynamically. Like this I could set login_hint to the email of the user currently trying to authenticate.

This issue #5232 already describes the issue pretty well, especially the last comment regarding dynamic parameter values.

In my use case, I need a standard Authentik login where the user is prompted for their username or email. A policy would then check the domain of the username and, based on that, either redirect to Google SSO or use the local database. However, with static parameters, I cannot set the login_hint dynamically, as it should be the email entered in the initial Authentik form.

Describe the solution you'd like

I would like a way to set arbitrary additional OAuth parameters and be able to use dynamic values from flows such as email, username, etc.

Describe alternatives you've considered

It works fine without login_hint but it would be an improvement for end users as they don't have to enter their email twice - once in authentik and then again at the social login provider (Google/Discord/Gitlab etc.).

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestenhancement/confirmedEnhancements that will be implemented in the future

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions