<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1467245447748_2897" dir="ltr">Hello,</div><div id="yui_3_16_0_ym19_1_1467245447748_2897" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1467245447748_2897" dir="ltr">I am trying to integrate keycloak and Salesforce using Salesforce as an identity provider. It seems some of the information required to properly set up the Salesforce as SAML IdP is missing in the keycloak's SAML identity provider configuration. For example, "Entity Id", according to the Salesforce documentation, is "<span style="color: rgb(85, 85, 85); font-family: "Helvetica Neue", Helvetica, Arial; font-size: 14.634px; line-height: 17.5608px;" id="yui_3_16_0_ym19_1_1467245447748_3227">This value comes from the service provider. Each entity ID in an organization must be unique. If you’re accessing multiple apps from your service provider, you only need to define the service provider once, and then use the </span><samp style="font-family: "Courier New", Courier, monospace; font-size: 16.0974px; line-height: 17.5608px;" id="yui_3_16_0_ym19_1_1467245447748_3228">RelayState</samp><span style="color: rgb(85, 85, 85); font-family: "Helvetica Neue", Helvetica, Arial; font-size: 14.634px; line-height: 17.5608px;" id="yui_3_16_0_ym19_1_1467245447748_3229"> parameter to append the URL values to direct the user to the correct app after signing in." (https://help.salesforce.com/HTViewHelpDoc?id=service_provider_define.htm&language=en_US). The SAML identity provider configuration in keycloak does not have a setting to specify "Entity Id". Another missing attribute is "ACS URL" (</span><span style="color: rgb(85, 85, 85); font-family: "Helvetica Neue", Helvetica, Arial; font-size: 14.634px; line-height: 17.5608px;" id="yui_3_16_0_ym19_1_1467245447748_3347">The ACS, or assertion consumer service, URL comes from the SAML service provider.). </span></div><div id="yui_3_16_0_ym19_1_1467245447748_2897" dir="ltr">Has anyone been able to set up Salesforce as IdP and keycloak as SP using keycloak's SAML identity provider? Is this even possible given that some required parameters are missing?</div><div id="yui_3_16_0_ym19_1_1467245447748_2897" dir="ltr">Thx</div><div id="yui_3_16_0_ym19_1_1467245447748_2897" dir="ltr">Peter</div></div></body></html>