Allow user to select between logged in accounts with prompt=select_account

[dotrunghieu96]

Question

Hi everyone,

In case an user wants to log in with different accounts (let's say 1 from google, 1 from github, ...), how can I enable this?

What I've tried:

NextJS Frontend

In my NextJS application, using auth.js, I added the prompt=select_account query parameter as described in the OIDC spec

const signInAUthentik = async () => {
    try {
      await signIn(
        'authentik',
        {
          callbackUrl: '/projects',
        },
        {
          prompt: 'select_account',
        },
      );
    } catch (_) {
      showToast.error({
        title: t('error.system_error_title'),
        description: t('error.system_error_description'),
      });
    }
  };

Authentik configuration

My application prodiver is configured with the default default-authentication-flow (no changes in stages binding)

---

Application Provider

Flow Stages Binding

But still after logout and login again, I'm still authenticated immediately, there are no account selection screen. Is this part of the OIDC spec not implemented (since it is not a MUST)?

[dewi-tik]

The social sources need to be added to authentik: https://docs.goauthentik.io/docs/add-secure-apps/flows-stages/stages/identification/#source-settings

You can then add the social sources to the identification stage: https://docs.goauthentik.io/docs/add-secure-apps/flows-stages/stages/identification/#source-settings

These sources are then displayed at the login screen.

[dotrunghieu96]

Thanks @dewi-tik, I actually have all my social login setup and usable.

What I'm trying to achieve is a screen to choose between logged in accounts, for example from zitadel (with prompt=select_account):

Only upon clicking other user, the user is redirected to the login page with all the sources.