Hi :wave: We are a B2B multi-tenant SaaS company ...
# talk-kratos
i
Hi 👋 We are a B2B multi-tenant SaaS company and got stuck on a problem. We would like to know which OIDC provider the user used to sign in with when we reach the consent flow so we can include it in the access token. Hydra added support to pass data from the accept-login endpoint to the consent flow, but Kratos doesn't utilize this field today. We want Kratos to provide details about the login flow (at least provider ID for generic OIDC) in the context object after a successful authorization code flow against the OIDC provider. We have yet to find a way to work around this problem and secure ourselves against man-in-the-middle attacks. Does anyone know how to solve this?
I filed a feature request for it: https://github.com/ory/kratos/issues/3270