Repository navigation
Using a Single IdP Across Multiple Tenants in Keycloak #40302
Unanswered
PasanGunathilaka
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I'm working on a multi-tenant application, and authentication is handled through Keycloak. Each organization represents a tenant, and I want to use only three identity providers (IdPs): one for Microsoft, one for Google, and one for Oracle.
My goal is to control which tenant is authorized to use which IdP. However, Keycloak currently requires creating a new, unique IdP configuration for every tenant. This becomes inconvenient, especially for Microsoft, since it would mean creating a new Azure Entra ID app for every tenant.
Instead, I would like to use a single Azure Entra ID app and a single corresponding Keycloak IdP, and then have Keycloak dynamically link it to different tenants.
Is this possible in the current setup? If not, is there any plan to support this functionality in a future release?I'm using Keycloak version 26.0.8.
All reactions