{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2703","repository_url":"https://api.github.com/repos/IdentityServer/IdentityServer3","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2703/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2703/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2703/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2703","id":140598125,"number":2703,"title":"Mapping the identity from an external IDP to local","user":{"login":"buddhike","id":2134633,"avatar_url":"https://avatars.githubusercontent.com/u/2134633?v=3","gravatar_id":"","url":"https://api.github.com/users/buddhike","html_url":"https://github.com/buddhike","followers_url":"https://api.github.com/users/buddhike/followers","following_url":"https://api.github.com/users/buddhike/following{/other_user}","gists_url":"https://api.github.com/users/buddhike/gists{/gist_id}","starred_url":"https://api.github.com/users/buddhike/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/buddhike/subscriptions","organizations_url":"https://api.github.com/users/buddhike/orgs","repos_url":"https://api.github.com/users/buddhike/repos","events_url":"https://api.github.com/users/buddhike/events{/privacy}","received_events_url":"https://api.github.com/users/buddhike/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-03-14T07:33:31Z","updated_at":"2016-03-14T08:27:08Z","closed_at":null,"body":"### Question\r\n\r\nI'm looking at an option for mapping an identity in an external IDP to an internal one. For example, a client may issue auth request with acr=idp:external_idp. External IDP requires a redirection to authenticate the user.\r\n\r\nOnce the user is authenticated at external idp, I would like him to authenticate again locally (using IdSrv login screen) so that I can map the external identity to the local one. \r\n\r\nIs there a neat extensibility point in IdSrv to implement this?\r\n"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/196199416","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2703#issuecomment-196199416","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2703","id":196199416,"user":{"login":"leastprivilege","id":1454075,"avatar_url":"https://avatars.githubusercontent.com/u/1454075?v=3","gravatar_id":"","url":"https://api.github.com/users/leastprivilege","html_url":"https://github.com/leastprivilege","followers_url":"https://api.github.com/users/leastprivilege/followers","following_url":"https://api.github.com/users/leastprivilege/following{/other_user}","gists_url":"https://api.github.com/users/leastprivilege/gists{/gist_id}","starred_url":"https://api.github.com/users/leastprivilege/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leastprivilege/subscriptions","organizations_url":"https://api.github.com/users/leastprivilege/orgs","repos_url":"https://api.github.com/users/leastprivilege/repos","events_url":"https://api.github.com/users/leastprivilege/events{/privacy}","received_events_url":"https://api.github.com/users/leastprivilege/received_events","type":"User","site_admin":false},"created_at":"2016-03-14T08:27:08Z","updated_at":"2016-03-14T08:27:08Z","body":"ExternalAuthenticateAsync should work as well - it muss be a local form in our pipeline. Check the docs on the user service and partial logins."}}