I am using the Identity 2.0 Sample.
I get that by setting isPersistent to true in ExternalLoginCallback action method, the browser will automatically log the user in
Check out the AccountController.ExternalLoginConfirmation
action and note the call to await SignInHelper.SignInAsync(user, isPersistent: false, rememberBrowser: false)
. You can set those values to true, or you can update the ExternalLoginConfirmationViewModel
and corresponding ExternalLoginConfirmation
view to let the user decide.
BTW: isPersistent
will persist the users session across closing and reopening their browser. The rememberBrowser
argument is particular to two factor authentication and it sounds like should be left false for your circumstance.
Tangentially related Supporting remember me with two factor authentication