Advice on multiple Identity providers

We have recently rolled out Keycloak as our authentication system. We have around 60+ websites across multiple countries all using the same realm.

We have had requests to set up multiple Identity Providers to enable federated login. Setting up the IDPs is fine, but is there any way we can avoid having to have a drop-down list of providers on the login screen or a page of 15-20 buttons?
Many of these IDPs would only make sense for sites servicing particular geographical regions, so is there a way to filter the list of IDPs based on the site the user is trying to access?

Check out this custom SPI: keycloak-home-idp-discovery [1] by sventorben. It will make your life easier when dealing with multiple Identity Providers.

[1] GitHub - sventorben/keycloak-home-idp-discovery: Keycloak: Home IdP Discovery - discover home identity provider or realm by email domain

1 Like