Repository navigation
Replies: 1 comment
|
Review this custom SPI - it may help based on your use case: |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hi everyone,|
I want to prevent User A, who has the "A-role" in Client A, from being able to log in to Client B if they don’t have the required role for Client B. Ideally, I’d like to block the login attempt entirely and show an “invalid credentials” error on the login page (rather than allowing the user to log in and then blocking access).
I found a way to do this using an authentication flow, but I’d to stop the login earlier before authentication is completed. Is that possible?
I already tried to use this approach but it didn't work for me: https://stackoverflow.com/questions/79533407/how-to-restrict-user-login-to-specific-clients-in-keycloak-based-on-attributes
I'm using keycloak version 26
All reactions