How to show the organization list only after the password step? #54782

guy-francis · 2026-11-06T16:59:00Z

guy-francis
Nov 6, 2026

How to show the organization list only after the password step?

Setup

Keycloak 26.8.1, Organizations enabled
Clients request scope=organization
Some users are members of more than one organization

What happens

User enters their email on the identity-first page.
If they belong to more than one organization, they are listed on the next page and the user has to select the pne they want to use.
Only after choosing one does the password page appear.

So the user's organization memberships are displayed before any credential has been verified. Anyone who knows the email address sees the same list.

What I expected

The username → password step to complete first, with the organization picker shown only to an authenticated user (as it already is on SSO re-authentication).

Questions

Is there a supported way to configure this so organization selection happens after authentication?
If not, is showing the picker before authentication intended, or would a change (or a config option on the authenticator) be welcome?

Navigation Menu

Repository navigation

How to show the organization list only after the password step? #54782

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

How to show the organization list only after the password step? #54782

Uh oh!

guy-francis Nov 6, 2026

Setup

What happens

What I expected

Questions

Replies: 0 comments

guy-francis
Nov 6, 2026