Home Realm Discovery

Alianza supports multiple identity providers. To ensure the correct identity provider is used for the user onboarding, send a login_hint parameter on the authorize request.

GET {baseUrl}/authorize
  ?response_type=code
  &client_id={client_id}
  &redirect_uri=https://your-app.example.com/callback
  &scope=experience-connections:manage experience-assignments:manage
  &state={random_state}
  &code_challenge={code_challenge}
  &code_challenge_method=S256
  &login_hint=+14155551234

The hint is a phone number in E.164 format (e.g. +14155551234), and should be the phone number the user wishes to use with your Experience.

Preserving hints from inbound URLs

When a user arrives at your portal via a deep link from a Service Provider portal with no active session, that inbound URL may carry an org_code or login_hint query parameter. Forward those parameters from the inbound URL onto the Alianza /authorize request. This lets Alianza skip its own Home Realm Discovery step and route the user directly to the correct identity provider.

See also