I've been trying to get a v12 site working with multiple Azure AD accounts (something that's been running fine for years on v7) but I've hit a wall. Works fine with one and I can trigger the SSO process for more than one but the postback from the provider always fails for any provider but the first one. I suspect this is something to do registering the schemes in a certain way but can't find any helpful documentation. I know this is possible I just seem to be missing something. Among other things, I've tried adding multiple

builder.AddMemberExternalLogins()

and also multiple

memberAuthenticationBuilder.AddOpenIdConnect

within that and they both throw

Exception: Unable to unprotect the message.State

Any ideas?

Hi andyc, can you share the authentication schemes that you use when you register these login providers? I'm thinking that perhaps your registrations might overwrite eachother or parts of eachother.

Hiya. The only deviation from the boilerplate code that's in all the tutorials is the class name and the SchemeName variable.

I see, that's exactly how it should be, I think

(heart sinks)

Happy to help 😊

All working. You're my absolutely hero!