Re: Force Google Account Selection on every login

We have an issue similar to the one linked above. In our case, we have configured Google IdP via SAMLv2.

When a user starts the sign-in flow, Google's AccountChooser pops up, the user selects one account and finishes the sign-in flow without issues. The second time the user signs in, the account chooser does not appear, so there is no way to select another account.

We use the idp_hint param to skip the FusionAuth sign-in page and go straight to Google's AccountChooser. We tried login_hint and prompt=select_account to the OAuth authorization URL without success.

Is there a way to force Google account selection via SAMLv2?

Any suggestions are welcome, thanks in advance!

@dan I would need to explore what the requirements are to have an OIDC integration instead. This change might also require bothering customers with more configuration on their side.

Thanks for the help!

Re: Force Google Account Selection on every login

We have an issue similar to the one linked above. In our case, we have configured Google IdP via SAMLv2.

When a user starts the sign-in flow, Google's AccountChooser pops up, the user selects one account and finishes the sign-in flow without issues. The second time the user signs in, the account chooser does not appear, so there is no way to select another account.

We use the idp_hint param to skip the FusionAuth sign-in page and go straight to Google's AccountChooser. We tried login_hint and prompt=select_account to the OAuth authorization URL without success.

Is there a way to force Google account selection via SAMLv2?

Any suggestions are welcome, thanks in advance!

Hello there!

I have one Application and many Tenants, each with its theme. Is it possible to use the same app and show the tenant custom theme in /oauth2/authorize ?

The docs show it's possible to pass tenantId query string param, like so:
/oauth2/authorize?client_id=...&redirect_uri=...&tenantId=<UUID>

Testing locally it doesn't work.

1. Is it a paid feature?
2. Should I go with a multiple Tenant+App approach instead of a multiple Tenant+single App?

Any guidance is welcome!

Best,
Nico.