First Broker Login

[npasic]

Hi everyone,
Is there any way to configure external IDP and let the user in the app without prompting any additional form to verify/update/create an account on a realm he’s using?
Namely, we’re trying to configure external IDP (SAML and IODC) and let the user in the app after he perform login in external IDP. But, every time, there is a prompt to allow user update/create local account on a realm the app is using.
This keycloak-documentation/first-login-flow.adoc at main · keycloak/keycloak-documentation · GitHub does not work. The flow remains the same.
In the best case, we’re able to get an “Invalid requester” error message.

Can anyone advice on how to create a configuration to let the user into the app without additional prompts after he successfully logs in with external IDP?

[xgp]

One thing is to turn on User Profile Enabled in Realm settings → General and then set each of the params in Realm settings → User profile you aren’t expecting from the remote IdPs to not required. Assuming the IdP provides the profile information that is required (e.g. just email), the user won’t be sent to an update profile screen.