IDENTITY_PROVIDER_FIRST_LOGIN event is never triggered / saved

[paulkilla]

I’m hoping this will fix my issue:

Enabling user via IDP login

We have a requirement where we 100% trust a login from IDP, so if we have a disabled user in our keycloak, and they try to login from the IDP we want to enable the user as part of the process. I have written a custom provider that hooks into the First Login Flow from the IDP and before attempting to link the IDP to Keycloak account we enable the account, and this works perfectly. My issue arises when the user is already linked to an existing keycloak user, but they are now disabled after a per…