# Hide IDP for certain client

**URL:** <https://forum.keycloak.org/t/hide-idp-for-certain-client/8159>\
**Category:** Configuring the server\
**Created:** [March 26, 2021, 11:46am UTC](https://forum.keycloak.org/t/hide-idp-for-certain-client/8159 "2021-03-26T11:46:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![bob\_sheknowdas](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@bob\_sheknowdas](https://forum.keycloak.org/u/bob_sheknowdas)\
**Post date:** [March 26, 2021, 11:46am UTC](https://forum.keycloak.org/t/hide-idp-for-certain-client/8159/1 "2021-03-26T11:46:26Z")

</div>

I have several client applications behind my keycloak server.

Only for some of them the users should be able to login via external idp.  
For the rest of the client the external idp should be hidden on the keycloak login page.

How can I configure the idp to only be available for certain clients?

---

<div class="post-metadata">

**Author:** ![ivan-pinto](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/ivan-pinto/32/11966_2.png) [@ivan-pinto](https://forum.keycloak.org/u/ivan-pinto)\
**Post date:** [April 1, 2026, 3:47pm UTC](https://forum.keycloak.org/t/hide-idp-for-certain-client/8159/2 "2026-04-01T15:47:43Z")

</div>

Hi. Any Update to this ?

---

<div class="post-metadata">

**Author:** ![djordje](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/djordje/32/10815_2.png) [@djordje](https://forum.keycloak.org/u/djordje)\
**Post date:** [April 7, 2026, 10:01am UTC](https://forum.keycloak.org/t/hide-idp-for-certain-client/8159/3 "2026-04-07T10:01:42Z")

</div>

I guess you can add some condition in authentication flow based on user attribute or so.

---

<div class="post-metadata">

**Author:** ![hramos](https://avatars.discourse-cdn.com/v4/letter/h/9d8465/32.png) [@hramos](https://forum.keycloak.org/u/hramos)\
**Post date:** [April 7, 2026, 10:31pm UTC](https://forum.keycloak.org/t/hide-idp-for-certain-client/8159/4 "2026-04-07T22:31:22Z")

</div>

You could also use a custom theme per client. Keycloak lets you assign a different theme to each client, so you can simply not render the IDP button in the login template for the clients where it should be hidden.
