Redirect URIs based on requested origin

1

Hi Team,
Is it possible to configure multiple redirect uri’s as part of open id connect client configuration in keycloak ? My use case is , i have a website with multiple pages
Page 1 - http://mydomain/page1
Page 2 - http://mydomain/page2
If i am redirecting user to keycloak from first page , i need keycloak to redirect back user to first page after successful login, And if i am redirecting user to keycloak from second page , i need keycloak to redirect back user to second page after successful login and like this for all pages. Is this possible ? can someone help me for making right configuration to achieve the same.
Thanks,
Anish

3 Likes
2

I simply created a public client and added https://myhost.domain/* to valid redirect urls. Your desired behaviour works out of the box for me for the. Maybe you forgot to add the asterisk to the end of the redirect url pattern?

3

Hi,
I did the same thing, but it is always redirecting back to page1. Not considering the requested origin. Can you please help

4

I am also facing the same issue , i need redirect to the urls based on the client request but now every diffrent url request lands on the same page

1 Like
5

Hi panditb,
Have you found a solution to your problem yet?
Best,
Raymond

6

hello,
did anyone manage to work different redirect uri based on the origin of the request ?

7

I guess these questions stem from a misunderstanding of the purpose of the redirect url:

It should always redirect to the endpoint that does the handling of the returned code and retrieves the token. This endpoint is then also responsible for redirecting to the final target page (either hardcoded or e.g. by retrieving a value stored in the local user session prior to requesting authentication).

8

my use case is a little bit different I have 3 redirect uri and I want to redirect to redirect based on the origin header in the request but the problem is the SamlService class redirect to my custom authentication provider.
I want to override the SamlService class in order to modify the authsession that is being sent to my custom authentication provider