# Kc\_idp\_hint for SAML Client

**URL:** <https://forum.keycloak.org/t/kc-idp-hint-for-saml-client/18197>\
**Category:** Getting advice\
**Created:** [October 31, 2022, 4:46am UTC](https://forum.keycloak.org/t/kc-idp-hint-for-saml-client/18197 "2022-10-31T04:46:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![melancholia](https://avatars.discourse-cdn.com/v4/letter/m/dbc845/32.png) [@melancholia](https://forum.keycloak.org/u/melancholia)\
**Post date:** [October 31, 2022, 4:46am UTC](https://forum.keycloak.org/t/kc-idp-hint-for-saml-client/18197/1 "2022-10-31T04:46:55Z")

</div>

Hi there:

Has anyone had success creating a SAML client to leverage kc\_idp\_hint? There is a description in post below - I could not quite get my head around it.

> [@Using kc\_idp\_hint to skip default idp with SAML?](http://forum.keycloak.org/t/using-kc-idp-hint-to-skip-default-idp-with-saml/4500):
>
> I’m trying to use kc\_idp\_hint to skip the default identity provider for some users as explained [here](https://www.keycloak.org/docs/latest/server_admin/index.html#_client_suggested_idp). Concretely, my scenario matches this: The kc\_idp\_hint query parameter also allows the client to override the default identity provider if one is configured for the Identity Provider Redirector authenticator. The client can also disable the automatic redirecting by setting the kc\_idp\_hint query parameter to an empty value. My client is connected to Keycloak via SAML but the documentation ment…

---

<div class="post-metadata">

**Author:** ![kensei62](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kensei62/32/5413_2.png) [@kensei62](https://forum.keycloak.org/u/kensei62)\
**Post date:** [October 31, 2022, 9:07pm UTC](https://forum.keycloak.org/t/kc-idp-hint-for-saml-client/18197/2 "2022-10-31T21:07:08Z")

</div>

Yes, we use kc\_idp\_hint to send the user directly to a particular IdP for authentication. All you need to do is add, for example, “kc\_idp\_hint=github” as a query string parameter to your SAML request. In our case, we are using OneLogin’s Java SAML library so we simply added the parameter to the parameter map passed in the call to Auth.login().