Hello,
Is this a supported workflow on keycloak?
SAML IDP -> Keycloak SAML Identity Provider -> OIDC client
Additional detail:
The UI workflow for a user will begin at their own IDP. The user will login to their IDP and click on a SSO application. This application will be setup along with the Keycloak SAML Identity Provider.
So, since the user is authenticated at their IDP, the user should be allowed to Single Sign on to keycloak (should establish a session with keycloak without authenticating again) and then be redirected to the OIDC application (Angular JS app; and be logged in to this app)
I have been able to successfully perform a SP initiated login
User navigates to Angular app -> Clicks on 'login with my IDP' -> User is taken to their IDP where they authenticate -> Upon successful authentication we automatically establish a keycloak session and log them on to the Angular app.
However I cannot get the IDP initiated login to work (as mentioned earlier). Just wondering if anybody has got this to work with keycloak (with a OIDC client). Please let me know.