FAQ

Can the URL to my application be event-specific?

Yes. Your entry page can be event-specific as long as it initiates the expected IdP login redirect flow.

Can my OIDC redirect URL be event-specific?

Only if each redirect URL is whitelisted in the IdP. A generic redirect URL is typically easier to operate at scale.

How should I pass event context during login?

Use the OAuth/OIDC state parameter for event ID or session metadata. Parse it after redirect.

Why am I not getting email in user claims?

Ensure profile is included in requested OIDC scopes.

Do OIDC login tokens automatically authorize REST API calls?

No. REST API access uses a separate service authentication flow (client_credentials) and requires X-Tenant-Id.

What if one user maps to multiple exhibitors?

The exhibitor lookup endpoint can return multiple records for the same email. Your UI should support user selection before proceeding.