Login_hint Behavior with Identifier First Flow and Additional Signup Fields

Overview

When using Universal Login with Identifier First with additional fields on the signup form and passing the login_hint along with screen_hint, a redirection is triggered to u/signup/password, and no additional details are asked. login_hint takes the user to the password authentication page.

When a login_hint argument is passed to the /authorize request, the identifier-first prompt is skipped, and the user is immediately taken to the password prompt.

Applies To

  • Identifier First flow

Cause

When a login_hint argument is passed to the /authorize request along with the screen_hint=signup, the identifier-first prompt is skipped and immediately taken to the password prompt. It gets redirected to the u/login/password, and no additional details are requested. login_hint takes the user to the password authentication page.

Solution

This is currently by design when the Identifier first setting is enabled and passing login_hint. It always goes to the password prompt, skipping the ID first prompt.

There are two options to work around this behavior:

  • Configure additional signup fields on the signup-password prompt so that the data can be collected on the signup-password prompt screen.
  • Use ID + Password instead of ID first authentication profile. This way if screen_hint is passed along with login_hint the email will be auto-filled and also the additional fields will be rendered along with the password field.