Hi, is there a way to get hold of the AuthenticatingAuthority in the AuthnContext from a SAML Assert via a mapper or similar? I need it to know which IdP was used for logging in when later wanting to sign a document using the same IdP. I am using a federated set of IdP, which is handled outside Key…

Did you try session note? [image] Determine if user is logged in with IdP or not Getting advice This might help: After a user login from an external IDP, Keycloak stores user session note data that you can access. This data can be propagated to the client requesting log…

Thanks for the suggestion, but that was my first thought as well. But I have only found the two attributes identity_provider and identity_provider_identity mentioned in sessions notes (maybe there are more?). The identity_provider only contains the brokers id, not the entityid of the upstream IdP. O…

Getting hold of the AuthenticatingAuthority

Getting advice

jangaraj May 1, 2022, 8:23am 2

Did you try session note?

Topic		Replies	Views
Obtain information whether user comes from an identity provider or not Extending the server authentication , identity-brokering	1	147	December 16, 2024
Share data between authenticator and IdP authenticator Getting advice	0	82	June 12, 2024
Access SAML assertion values in post-broker-login-flow authenticator Extending the server identity-brokering , saml	0	43	November 29, 2024
Determine if user is logged in with IdP or not Getting advice	4	3940	June 10, 2022
Brokering identity without store personnal data Getting advice identity-brokering	7	930	June 30, 2021

Getting hold of the AuthenticatingAuthority

Related topics