I’m creating a new community without self registration. My goal is to have users who already have a specified profile be able to login using LinkedIn as an Authentication provider. I’ve got everything working, except I can’t figure out how to pass a custom message if user successfully authenticates to LinkedIn, but is then turned away because the controller doesn’t let them in. Right now they just land back on the signin page with no error.

So, how can I pass a message from the registrationHandler back to the user? I've tried throwing an exception or sending an apex pages.message.

I’ve setup the LinkedIn auth provider using the following controller:

    global User createUser(Id portalId, Auth.UserData data){

    Profile p = [SELECT Id FROM profile WHERE name='Foo Partner'];
    List<User> userWithEmailMatch = [SELECT Id FROM User WHERE Email=:data.email AND ProfileId=:p.Id];
    if (userWithEmailMatch.size()>0){
        return userWithEmailMatch[0];

    throw new LinkedInSSOException('This is a private system');
    throw new Auth.AuthProviderPluginException('My custom error');

    // ApexPages.Message myMsg = new ApexPages.Message(ApexPages.Severity.FATAL,'my error msg');
    // ApexPages.addMessage(myMsg);
    return null;

      global void updateUser(Id userId, Id portalId, Auth.UserData data){
        //not updating anything, just letting user log back in

      class LinkedInSSOException extends Exception{


and the signin controller:

    global String username {get; set;}
    global String password {get; set;}
    public String orgId {get; set;}
    public String siteURL  {get; set;}
    public String startURL {get; set;}
    public List<AuthProvider> authProviders {get;set;}

    public signInController() {
        orgId = UserInfo.getOrganizationId();
        siteURL  = Site.getBaseUrl();
        startURL = System.currentPageReference().getParameters().get('startURL');
        if (startURL == null) startURL = '/';
        authProviders = [SELECT Id,DeveloperName,FriendlyName,ProviderType FROM AuthProvider];
    global PageReference login() {
        return Site.login(username, password, startUrl);

    global String getEncodedSiteUrl() {
        return EncodingUtil.urlEncode(siteURL, 'UTF-8');

    global String getEncodedStartUrl() {
        return EncodingUtil.urlEncode(startURL, 'UTF-8');

and the signin VF page:

<apex:page id="loginPage" showHeader="false" showChat="false" sidebar="false" standardStylesheets="false" controller="signInController">
    <meta charset="utf-8"/>
    <meta http-equiv="X-UA-Compatible" content="IE=edge"/>
    <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
    <title>Sign In</title>

    <apex:stylesheet value="{!URLFOR($Resource.Bootstrap,'/css/bootstrap.min.css')}"/>



    <div class="container">

      <apex:form id="loginForm" forceSSL="true" styleClass="form-signin">
        <h2 class="form-signin-heading">foo</h2>
        <p>If this is your first time here please click the reset password link.</p>
        <p>You also may login using LinkedIn</p>
        <p>If you experience any issues please reach us at <a href="mailto:foot@foo.org">foot@foo.org</a></p>

        <apex:pageMessages showDetail="false" id="error"/>

        <apex:inputText required="true" id="login-email" styleClass="form-control un" value="{!username}" label="Username"/>
        <apex:inputSecret id="login-password" styleClass="form-control pw" value="{!password}" label="Pasword"/>

        <apex:commandButton action="{!login}" value="Sign in" id="login-submit" styleClass="btn btn-lg btn-primary btn-block"/>
        <div id="login-option">
            <span class="form-signin-forgot"><a href="./resetPassword">Reset Password!</a></span>
        <a href="/foo/services/auth/sso/LinkedIn?startURL=%2Ffoo%2Fs%2F">login with linky in</a>          



  <script src="https://code.jquery.com/ui/1.12.0/jquery-ui.min.js" ></script>
$(document).ready(function() {


Answering my own question, the exception shows up as a ErrorDescription query string on the error page. Custom error page can be defined in Auth Provider setup.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.