Keycloak redirect url masking.

[nandish kumar]

Hi Team,

I need one clarification regarding Keycloak redirect URL masking.

In our organization, we have multiple external and internal portals. As per the client’s requirement, for external portals they are requesting URL masking.

Currently, the application URL is:

xyz.company.com

After redirect, the Keycloak URL appears as:

https://abs.company.com/auth/realms/ABS-21/protocol/openid-connect/auth?client_id=First&redirect_uri=https%3A%2F%2Fxyz.company.com%2Flogin%2F&state=f56cca02-d015-4f5a-982b-d55a3cec6d4e&response_mode=fragment&response_type=code&scope=openid&nonce=61e60a07-490f-4e93-a40b-cd09c19fa37c&code_challenge=S-bQJf9Tkk0W1578btX_-KN-7nVJmSy-xVyFoDNKLx8&code_challenge_method=S256

The proposed masked URL is:

https://abs.company.com/auth/realms/ABS-21/protocol/openid-connect/auth?client_id=First.

Could you please confirm:

• Is it feasible to mask the full redirect URL in this manner?
• If yes, what would be the recommended approach or configuration in Keycloak to achieve this?

Regards
Nandish.