services.AddAuthentication()
.AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, options => {
options.SignInScheme = IdentityConstants.ExternalScheme;
options.ClientId = "Your replying party id";
options.ClientSecret = "Client Secret provided by our broker";
options.Authority = "Broker OpenId Url"; //issuer from well-known configuration
options.ResponseType = "code";
options.GetClaimsFromUserInfoEndpoint = true;
options.Scope.Add("openid");
options.ClaimActions.MapJsonKey("connectis:email","Email","string");
options.ClaimActions.MapJsonKey("connectis:loa","acr","string");
//The next section is only for extra parameters to be send if required
options.Events = new OpenIdConnectEvents
OnRedirectToIdentityProvider = context =>
context.ProtocolMessage.SetParameter("parameter name", "parameter value");
return Task.FromResult(0);