@dan

I tried to play around with lambdas (both JWT populate and SAML reconcile), found next:

• in populate, user.registrations[x].tokens field is always empty (at least for SAML providers);
• in reconcile, samlResponse contains conditions.audiencess[x]
  -> https://domain.name/samlv2/sp/4d7c275f-1e34-43b8-b651-103582e96fa3 with an IdP ID;
• also, in Event Log, debug message of SAML lambda has an IdP ID in it:
  SAML v2 IdP Response Debug Log for [IdP Name] with Id [4d7c275f-1e34-43b8-b651-103582e96fa3]

For now, I could extract an ID from conditions.audiencess, but is there any other way to access it? audiencess is an array, in my case with only one element, what else I should expect to receive in this array?

@dan
I am using FusionAuth with a redirect to FusionAuth login page and after handling oauth-callback with my API.
In the ideal case, I would like to know the IdP ID during OAuth callback, which means when I will have obtained JWT.
Just IdP type isn't enough, because according to the unique IdP ID I need to decide which fields I will take from user.data reconciled from SAML or OpenID.
Webhook wasn't in consideration, because it would be hard to keep data in sync in my case.

Is it possible to determine, which IdP (IdP id in FusionAuth) was used by a user to login?