<div dir="ltr">Could someone please tell me if this is even possible? I do not want the execution engines/authentication providers to be executed in a fixed order defined in the admin console. But, need to be able to switch to any in the chain depending on some response I get upon invoking an external service. I needed to know if this is possible and if yes, then how? Any help would be appreciated.</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 18, 2016 at 4:21 PM, Rashmi Singh <span dir="ltr"><<a href="mailto:singhrasster@gmail.com" target="_blank">singhrasster@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks a lot for your response. I went through the chapter. What I understand is we can create multiple executions (authentication providers) but they are executed in a serial fashion in a fixed order defined. Is there a way to be able to switch between them (so, not have it executed in the default serial way but depending on the response we get from an external service we called, we can switch to the corresponding one). Any ideas?</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 17, 2016 at 3:49 AM, Marek Posolda <span dir="ltr"><<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>The docs is here :
<a href="http://keycloak.github.io/docs/userguide/keycloak-server/html/auth_spi.html" target="_blank">http://keycloak.github.io/docs/userguide/keycloak-server/html/auth_spi.html</a><br>
<br>
We have also example for authentication SPI. Note that you can
create sub-flows in the "top" flow, which might be a way to split
the authenticator into multiple ones. For example see "Forms" flow
in default "Browser" flow. Also maybe you will need to implement
some logic programatically in your authenticators based on various
conditions etc. Depends on the usecase though...<br>
<br>
Marek<span><br>
<br>
<br>
On 16/05/16 23:52, Rashmi Singh wrote:<br>
</span></div>
<blockquote type="cite"><span>
<div dir="ltr">Hi,
<div><br>
</div>
<div>I am looking for a way to do authentication provider
chaining with keycloak. Basically, I want to have multiple
authentication providers, example username, Suregrid etc. On
submitting username, we call a service and if that service
tells us to use SureGrid, then we should be able to pass
control to the corresponding authentication provider. So
basically, I want to spilt one authentication provider into
multiple and be able to chain them based on the response from
the service called. I have not found any documentation that
explains this. Could you suggest how to achieve this?</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</span><pre>_______________________________________________
keycloak-dev mailing list
<a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></pre>
</blockquote>
<br>
</div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>