@ezequiel-rebasa said in Unable to Obtain Tenant-Signed Access Token for Data-Plane Apps in a Multi-Client, Multi-Application FusionAuth Architecture:
prompt=none
OK a few things. One is it looks like there are a few open issues #521 and #2208 around FusionAuth not supporting the "prompt=none" parameter.
I may be missing something here, but using lambdas, I as able to hit the login event for both Tenants when logging in. I image you could make the changes you needed there.
I set up FusionAuth so that I have 2 Tenants Default and Test Tenant.
In Default there is the FA Login Master application.
I the Test Tenant I have the ExampleDotNetApp application.
I set up an Identify Provider named FusionAuth Default Tenant FA Login Master using the FA Login Master application as the (IdP) and enabled it on the Test Tenant ExampleDotNetApp. I created a lambda named "FA Default OpenID Reconcile" of type OpenId Connect reconcile.
The order the Lamda's were executed were as follows:
"FA Default Access Token Populate" of type JWT populate on FA Login Master
"FA Default OpenID Reconcile" on FusionAuth Default Tenant FA Login Master
"ExampleDotNetApp Access Token Populate" of type JWT populate on ExampleDotNetApp.
You could use potentially use any of those to inject info you need on the JWT.
**Please not that Lambda HTTP Connect is only available in an Essentials or Enterprise plan.
When I add a favoriteColor in the "ExampleDotNetApp Access Token Populate" lambda, I am able to see it in the ExampleDotNetApp application after logging in.
I would think with the access to those lambdas, you may be able to accomplish what you are trying to do.