You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Using the original SAML assertion from a SAML identity provider
#16735
I'm using keycloak as a open id connect wrapper around a SAML identity provider. Basically allowing my client to login using OIDC while keycloak gets the users from the SAML idp.
During the SAML login keycloak would be getting a SAML assertion that identifies the user that logs in. Since I am communicating using OIDC I don't have access to that assertion. My problem is in order to authenticate through another service I need to resend the SAML assertion elsewhere.
Is there a way I can get access to it? I thought about using mappers in the identity provider config but couldn't find anything that works to access the raw saml assertion.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I'm using keycloak as a open id connect wrapper around a SAML identity provider. Basically allowing my client to login using OIDC while keycloak gets the users from the SAML idp.
During the SAML login keycloak would be getting a SAML assertion that identifies the user that logs in. Since I am communicating using OIDC I don't have access to that assertion. My problem is in order to authenticate through another service I need to resend the SAML assertion elsewhere.
Is there a way I can get access to it? I thought about using mappers in the identity provider config but couldn't find anything that works to access the raw saml assertion.
Any ideas welcome
All reactions