Re: [keycloak-dev] Passing login_hint up to IdP when using kc_idp_hint
It doesn't seem it is possible ATM. The possibility is, that you create
your own implementation of identityProvider and you override method :
createAuthorizationUrl(AuthenticationRequest request)
The parameters of the original request, which was sent from your application to Keycloak,
are available from the clientSession notes (which itself is available on the
AuthenticationRequest).
Marek
On 07/12/16 19:06, Peter Chamberlin wrote:
Hi Keycloak team,
I'm working on a system which uses Keycloak as a broker to both OIDC and
SAML2.0 IdPs. We are using `kc_idp_hint` for every request and Keycloak is
never exposed to the user. The system uses OIDC to connect to Keycloak.
We would like to pass a `login_hint` or `subject` upstream to IdPs
(depending if it's OIDC or SAML) as we expect to know the user's IdP user
name, but this does not work out of the box. I can't see anything in the
documentation that would enable it.
Is it possible? If so how?
Many thanks for any help or pointers you can give.
Peter Chamberlin
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev