Re: [keycloak-dev] Automatically login user to application when logged into realm

Right, Imagine this scenario: An application (this can be a JSF or JS, or whatever) has a menu-bar that has options that should only be shown to certain users, it also displays the username of the logged-in user. A user that is not logged in to the SSO realm visits the application. The user then clicks on Login and is redirected to the login form on the Keycloak server. The user logs in and is redirected back to the application and can now see additional entries in the menu. Later another user that is already logged in to the SSO realm visits the same application. The application can't automatically log this user in, as that would require automatically redirecting the user to the login form on the Keycloak server. This would be fine for this user as the user is already logged-in. However, that would break the previous case where a user visited the application without being logged in to the SSO realm. Now, if there was an option to retrieve an access code (the proposal I've commited) without showing the login form you could solve both cases. The application can automatically log the user in to the application if already logged in to the SSO realm, and wouldn't end up showing the login form if the user was not logged in (instead the user would be redirected back to the application without being logged in, and able to click on Login when he/she chooses to). ----- Original Message -----