Repository navigation
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
{{ message }}
8000
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji
reacted with thumbs down emoji
reacted with laugh emoji
reacted with hooray emoji
reacted with confused emoji
reacted with heart emoji
reacted with rocket emoji
reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I am trying to figure out the following authentication flow, any help would be greatly appreciated:
For a cross organization application with many idp's, I want my users to be able to login with whatever organizational idp they want as long as the user is linked once with the "main" idp. Let's say that the "main" idp whose attributes are needed by clients is A and all the other idp's are B, A and B are oidc idp's.
My flows at this point are:
If authentication happens with A then follow the normal first broker login flow.
If authentication happens with B then check if the account already exists (and thus is linked to A), if not give a message "Login with A first and link there".
The user can link the B account on the account administration page.
What I want the B flow to be like:
If upon authentication the B account is not linked with an A account, redirect to the A idp, let the user login, and afterwards link the B to the A account.
Can anybody help me out or point me to the relevant documentation?
All reactions