SAML IDP Initiated Login for a OIDC client

113 views
Skip to first unread message

Keycloak User

unread,
Mar 23, 2023, 1:59:41 AM3/23/23
to Keycloak User
Hello,

Is this a supported workflow on keycloak?
SAML IDP -> Keycloak SAML Identity Provider -> OIDC client

Additional detail:
The UI workflow for a user will begin at their own IDP. The user will login to their IDP and click on a SSO application. This application will be setup along with the Keycloak SAML Identity Provider. 
So, since the user is authenticated at their IDP, the user should be allowed to Single Sign on to keycloak (should establish a session with keycloak without authenticating again) and then be redirected to the OIDC application (Angular JS app; and be logged in to this app)

I have been able to successfully perform a SP initiated login 
User navigates to Angular app -> Clicks on 'login with my IDP' -> User is taken to their IDP where they authenticate -> Upon successful authentication we automatically establish a keycloak session and log them on to the Angular app.

However I cannot get the IDP initiated login to work (as mentioned earlier). Just wondering if anybody has got this to work with keycloak (with a OIDC client). Please let me know.

Jatinder Kumar

unread,
Mar 31, 2023, 2:20:03 AM3/31/23
to Keycloak User
I am also facing the same issue.

I have setup Active Directory and Keycloak.
I am expecting Keycloak to communicate with Active Directory through SAML 2.0
And my client side application (in ReactJs) to authenticate users through Keycloak using OIDC.

The ReactJs application is able to login with users created directly in Keycloak. But it is not able to authenticate the users that are in Active Directory.
I have added Active Directory as Identity providers. And added ReactJs application as client with type OIDC.

Is there any specific configuration, that I am missing?
Please help to resolve the issue.
Reply all
Reply to author
Forward
0 new messages