Kc_idp_hint for SAML Client

[melancholia]

Hi there:

Has anyone had success creating a SAML client to leverage kc_idp_hint? There is a description in post below - I could not quite get my head around it.

Using kc_idp_hint to skip default idp with SAML?

I’m trying to use kc_idp_hint to skip the default identity provider for some users as explained here. Concretely, my scenario matches this: The kc_idp_hint query parameter also allows the client to override the default identity provider if one is configured for the Identity Provider Redirector authenticator. The client can also disable the automatic redirecting by setting the kc_idp_hint query parameter to an empty value. My client is connected to Keycloak via SAML but the documentation ment…

[kensei62]

Yes, we use kc_idp_hint to send the user directly to a particular IdP for authentication. All you need to do is add, for example, “kc_idp_hint=github” as a query string parameter to your SAML request. In our case, we are using OneLogin’s Java SAML library so we simply added the parameter to the parameter map passed in the call to Auth.login().