Hi,
I recently submitted a PR (my first @ keycloak) that closes a feature gap when it comes to propagating an OIDC client's "prompt=none" request to a SAML "IsPassive" request to a backing SAML IDP.
This scenario currently "works" if you know the hidden IDP config option that enables this and are configuring SAML IDPs via json/API. The PR adds a few missing links to make this feature supported:
* adds UI option to allow forwarding passive auth requests to SAML IDPs (already exists for OIDC IDPs)
* adds support for SAML "NO_PASSIVE" error that indicate that user cannot establish a session silently
Looking forward to getting some feedback on this!
Regards,
Mikkel