Bypass Keycloak login form and use directly the IDP login?

1

Hi to all, I’ve set an identity provider and now in my login page I’ve the choice to authenticate also with the IDP. I would like to use directly the idp page for all the clients.
I’ve try in the authentication flow to set in “Identity Provider Redirector” the Default identity provider

image
image1886×536 31.7 KB

image
image2724×638 89.2 KB

but when I try to login I’ve also the first login page with the IDP choice.

Hpow can use directly the IDP login?

thanks

2

Have you added the Authenticator workflow to the Client?

3

Try setting the “Forms”-Authenticator to ALTERNATIVE or DISABLED. Or create a new Flow containing only Cookie and IdP Redirector, and then use that new Flow as default Browser flow.

4

Yes I’ve added. in fact if I try to change something in the authenticator workflow I can see the effect during the authentication

5

I’ve try every combination, I’ve also create a new flow but if I disable the forms or I don’t insert it in the new flow I’ve this error:

image
image1156×522 25 KB

I’ve try to create a new flow like this:

image
image2738×336 43.6 KB

or modify the default one like this:

image
image2750×876 220 KB

But I’ve the previous error.

any idea?

6

I have a flow which looks exactly like your first screenshot. Are you sure you linked this flow to the browser-Binding? Or configured it as the login flow in the client (section “Authentication Flow Overrides”)?

7

Yes, I’m sure

image
image1724×534 22.8 KB

in fact switching between SAMLIDP and “original browser” the authentication change, with SAMLIDP I’ve always the previous error. maybe I’m missing something?

8

I’ve made some test looking logs and I’ve found solution.
I had specified like default identity provider the display name of the IDP and not the alias.

using alias it works fine.

Thanks for support

9

Hi I’m facing same issue
my alias is Microsoft and I want to jump to Microsoft sign in directly.
I am using Microsoft as identify provider connected with AAD

10

To configure Keycloak to go straight to IDP login, you must first set up a default IDP.

Check out the documentation: keycloak-documentation/default-provider.adoc at main · keycloak/keycloak-documentation · GitHub

1 Like
11

Hi, I was unable to open the above link.
Could you please check it once.

12

Hi , can anyone share how to by pass the keycloak login page to idp.

Scenario:
I have a keycloak which is running in two different ports
8080- is my service provider
9090 - is my identity provider

in this case when I login I should not get the 8080 login page instead it should redirect to the 9090 login page which is idp.
how can I configure this.

Thanks in advance

13

Use and read the docs, find the proper chapter!

https://www.keycloak.org/docs/latest/server_admin/index.html#default_identity_provider

1 Like
14

This helped, Thank you!

Could you please help with the below story too.

Scenario: I am having existing users in my local db( mysql) , i want to integrate these user tables into keycloak.How can I do this. I have tried with custom spi but no luck the created custom id name is not displaying in keycloak.

Thanks in advance!

15

Please don‘t misuse a specific thread for a different/new topic. Start a new thread instead.

16

Hi, My Usecase is a little bit similar.
Use case: If Login fails in keycloak login page then redirect to a identity provider and authenticate from there automatically if user is present there.
Note: Identity provider is another Keycloak Instance
.