Repository navigation
Using Keycloak as a frontend for external IDP #39517
Unanswered
slucas-elsa
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hi,
As stated in the title, my plan is to use Keycloak as a frontend for external OIDC IDP so I had to create a special login Flow to :
The problem I have is that when the user is redirected to the external IDP the username is not prefilled (no login_hint) so in my case the user has to type his username 2 times
I tried to hack
services/src/main/java/org/keycloak/authentication/authenticators/browser/IdentityProviderAuthenticator.javato getString username = context.getAuthenticationSession().getAuthNote(AbstractUsernameFormAuthenticator.ATTEMPTED_USERNAME);and use it .... it works but there must be cleaner solutionI've seen https://github.com/sventorben/keycloak-home-idp-discovery but it doesn't seem to fit my need because I can't use the domain to select the IDP.
Another problem I have with Username Form is if I user login_hint to fill the username, the user still have to submit the form to be redirected to his IDP, I did not see any way to submit automatically if the username is coming from login_hint
Thanks for the help.
Sébastien
All reactions