Welcome to the Kinde community.

P
K
A
A
A
Members
Noé Charmet
N
Noé Charmet
Offline, last seen 2 days ago
Joined June 5, 2024

Access token with org_name but no org_code.

Hello,
I received an access token in which the org_name is set but not the org_code. This occurred after the organization was deleted. This seems inconsistent, should they not be both set, or none of them ?

Data in thread

10 comments
P
N

Additional question on GET /api/v1/users/{user_id}/identities
This endpoint returns a has_more property suggesting that these is some kind of pagination, but there is no reference to pagination parameters for this endpoint in the documentation.

2 comments
P
C

Hello, I’d like to get all of the emails that Kinde has for a user using the management API.

I tried with the expand=identities query parameter of GET /api/v1/user as well as using the more detailed GET /api/v1/users/{user_id}/identities.

In both cases I get a response similar this one. You’ll notice that for social logins we only know the ID of the user on the social platform and not his email. In the Kinde interface I can see both my emails so I guess the data is somewhere.

{
  code: 'OK',
  message: 'Success',
  has_more: false,
  identities: [
    {
      id: 'identity_01905d43e802a5d9790edc101033abce',
      name: 'noe.charmet@allegoria.io',
      type: 'email',
      created_on: '2024-05-09T23:31:07.829075+00:00',
      is_confirmed: true,
      total_logins: 0,
      last_login_on: null
    },
    {
      id: 'identity_01905d43e80212ec58ecf28f9a52023e',
      name: 'google:100751070150657163917',
      type: 'oauth2:google',
      created_on: '2024-05-09T23:31:07.829075+00:00',
      is_confirmed: true,
      total_logins: 16,
      last_login_on: '2024-09-30T07:33:01.669987+00:00'
    }
  ]
}

5 comments
N
P
C

Hello,

I’m working on setting up Microsoft authentication for my account, started following this guide and found it to be incomplete or eronous.

1) Azure Active Directory is now called Microsoft Entra ID

2) To add an app from a tenant you now have to do. Manage -> App registrations. -> New registration

3) In the Redirect URI (optional) section, select your app type in the Select a platform dropdown.
This is false, you must set the app type to web or else you get the following error

Something went wrong when we tried to authenticate you, and we can’t offer a quick way out. Start a new session and try signing in again.
I guess Azure is authenticating with Kinde directly and not our app per se.

4) I still can’t get the Name claims to be filled properly

What I tried
  • From the application home
  • Go to Manage -> Token configuration
  • Click Add optional claim
  • Select proper claims (would need your confirmation on needed ones here) I select email, given_name, family_name, verified_primary_email, verified_secondary_email for both access and ID token
  • Go to Manage -> Authentication
  • In “Implicit grant and hybrid flows”, select both Access tokens and ID tokens.

Unfortunately still doesn’t work.

Here is my account data
  • allegoria.kinde.com
  • Microsoft connection conn_018f08909b86cf0a22eea545d486b547
  • Test user: kp_e3baf37defac40de93886cf1ebb9eeba

12 comments
N
O

When using SAML enterprise connections. Can I require my users to have a first name and last name ?

1 comment
N

What is the recommended methodology to implement user impersonation ?

How can I merge accounts when user sign-in with multiple IDP using the same email