Home Discovery #13339

pdevito3 · 2022-07-26T03:59:33Z

pdevito3
Jul 26, 2022

I’m curious if something like Duende’s Home Realm Discovery is on the roadmap at all?

The process of selecting the “best” authentication workflow for a user

No response

Provide users with the best login flow for them and enforce enterprise SSO like flows.

Since users are typically anonymous when they arrive at the gateway, you need some sort of hint to optimize the login workflow, e.g.

you present a list of available authentication methods to the user. This might work for simpler scenarios, but probably not if you have a lot of choices or if this would reveal your customers' authentication systems
you ask the user for an identifier (e.g. email address) and have a way to infer the right external authentication method from that id. This is a common technique for SaaS systems.
the client application can give a hint to the gateway via a custom protocol parameter of IdentityServer’s built-in support for the idp parameter on acr_values. In some case the client already knows the right authentication method, e.g. when your customers access your software via a customer-specific URL (see here).
you restrict the available authentication methods per client in the client configuration using the IdentityProviderRestrictions property (see here)

this project seems to have started the process?