Windows Live ID does not return "emailaddress"

Question

I'm trying to integrate CRM 2011 with Azure ACS. It works fine with yahoo and gmail accounts where I transform emailaddress to upn and able to login to CRM.

But with Windows Live ID i don't get the emailaddress and hence I can't map it to UPN and hence I can't login to CRM 2011.

Is there a way to get emailaddress from Windows Live ID (as identity provider)?

Thanks,

Panther.

Answer 1

Hi PantherTiger,

I don't think you can obtain the email address as claims (unlike Gmail or Yahoo!), from Windows Live ID. It is against Windows Live privacy policy.

You could write a custom STS making use of the server-side connect API to append email (and other properties) as additional claims. 

Hope this helps!

---

Cheers, Carlos Sardo

Answer 2

Thats by design. ACS wont expose user data from windows live. You can directly integrate with windows live using Live SDK 5.0 for more control with client side scripting or you can use web authentication

If you want uniform way of authenitcation system on way is to write a custom STS wrapping the login functionality.

You can configure custom sts in ACS. so that you would achieve uniform way of authentication for your web site.

---

Please mark the replies as Answered if they help and Vote if you found them helpful.

Answer 3

Thanks Carlos.

Writing a Custom STS was what I was also thinking.

---

Happy

Answer 4

Is there a document or msdn article that explains why it is bad practice to return "emailname"?

Thanks,

---

Happy

Answer 5

I dont see any! But when you use LIVE SDK, whatever you get from SDK is legal and also you need to follow the live ID terms and conditions.

You will also get user consent when you use live SDK.

Hope it helps

---

Please mark the replies as Answered if they help and Vote if you found them helpful.

Answer 6

Thanks Veerendra.

---

Happy