Using Azure ACS to get access to underlying identity provider's access/refresh token

Question

Hi there,

I couldn't find any clear indication of whether ACS provided this functionality or not.

I would like to leverage ACS to do most of my authentication work, but I would also like access to the identity provider's access/refresh token that was sent to ACS, so that I can make API calls to the identity provider to access the user's data such as calendar or profile information (assuming I've requested this access during the application authorization steps).

Is this possible using ACS? It seems as if ACS abstracts most of the underlying identity provider information out, and only provides an ACS token used purely for authentication purposes, not for use in talking directly to the identity provider.

Thanks!

Answer 1

Hi Ian, 

 Thank you for the post, one of our engineer will get back to you with details on this.

Happy Day!!!

Lakshmeesha

Answer 2

Greetings, Ian!

Apologies for the delay.

Could see that your query was answered in: http://stackoverflow.com/questions/29020966/using-azure-acs-to-get-access-to-underlying-identity-providers-access-refresh-t

Would be glad to assist with any additional questions you might have.

Thank you,

/Arvind

Answer 3

Thanks for getting back to me Arvind!

I do have a question. I noticed that in Azure ACS you guys allow custom permissions to be set for Facebook in the ACS management panel, but for Google we are not able to request any custom permissions (such as permission to access the Calendar API).

Are you guys planning on adding this functionality when you move ACS to Azure AD? If so when can I expect to see the preview available?

Thanks!