Merge users in CDC after signed in to Azure AD via OIDC

[max_olkhin296]

Hi Experts!

We are trying to set up user authorization in CDC through Azure Active Directory using OIDC RP.

We manually created a user in CDC with an email and password, just like in AzureAD. But when we try to sign in via AzureAd, it creates a new user in CDC with the same email address. Here says that it must be linked to an existing account with the same email address.

We checked this with ScreenSet (added a custom social provider "oidc-<our_oidc_id>") and with WebSDK using gigya.socialize.login method with loginMode="standard".

Login Identifier: email, Link Accounts Support: Site identities only

What additional configuration needs to be done?

Any help or information would be extremely helpful!

Thanks in advance,

[igal_mi]

You need to change Link Accounts Support policy to All Identities
You can read more about it here:

https://help.sap.com/viewer/8b8d6fffe113457094a17701f63e3d6a/LATEST/en-US/41627d4a70b21014bbc5a10ce4...

[max_olkhin296]

Hi Igal, thank you for your answer. In our case, we want to merge AzureAD user (OIDC identity) to existing CDC user (site identity). I think we can use "Site identities only" policy. Anyway, we also checked with "All identities" - the result was the same.

Our problem was invalid data from AzureAd. On the AAD side, the "username" field is an email address. But we had to add the same email address to the additional "email" field on the AAD side in order to be able to link the accounts.

But in order to link accounts, the user must additionally enter a password for the CDC user, which he does not know in our case. We wanted to migrate AzureAd accounts to CDC (initial import), but AAD does not have the ability to migrate passwords.