Ask for input during authentication
Previously we have used SSPR to let the user self register and complete the attribute profile. But we need to change the flow and have the user to login with external IDP, but not all attributes are provided from IDP and we want the user to input some values during first authentication, preferably before the userobject is created i directory.
I was thinking of two possible solutions,
1. Have external IDP to prefill NewUser form (SN,GivenName) in SSPR and then have the user to add some values and the submit. But Im not aware if it is possible to prefill NewUser forms i SSPR..
2. Build an authentication class that executes after external IDP and checks the authentication profile for missing values and ask the user for input.
Or is it possible to create the same functionality with virtual attributes, or any other builtin authentication class?
What would you have done?