11:49 a.m.
You used to be able to configure an identity broker as a default and
Keycloak would always delegate to this broker without showing the login
screen. Who removed this and why? Was it a mistake?
Thanks,
Bill
2:58 p.m.
This was replaced by an IdentityProviderAuthenticator, which is in
default "browser" flow.
AFAIR this was done because previously redirection to identity provider
happened earlier than authentication with SSO cookie.
Marek
On 23/02/17 18:49, Bill Burke wrote:
You used to be able to configure an identity broker as a default and
Keycloak would always delegate to this broker without showing the login
screen. Who removed this and why? Was it a mistake?
Thanks,
Bill
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
2:59 p.m.
JIRA with some details: https://issues.jboss.org/browse/KEYCLOAK-3342
On 23/02/17 21:58, Marek Posolda wrote:
This was replaced by an IdentityProviderAuthenticator, which is in
default "browser" flow.
AFAIR this was done because previously redirection to identity
provider happened earlier than authentication with SSO cookie.
Marek
On 23/02/17 18:49, Bill Burke wrote:
> You used to be able to configure an identity broker as a default and
> Keycloak would always delegate to this broker without showing the login
> screen. Who removed this and why? Was it a mistake?
>
>
> Thanks,
>
> Bill
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
2:59 a.m.
Did you not read the migration guide ;)
Fixes the issue https://issues.jboss.org/browse/KEYCLOAK-3342, but also
makes it possible to customize this behavior with a custom authentication
flow. For example if someone wants to direct to different IdPs based on
some other condition (client_id, redirect_uri, other query parameter,
etc.). It's just a better place for it now that we have the authentication
flwos.
On 23 February 2017 at 18:49, Bill Burke <bburke(a)redhat.com> wrote:
You used to be able to configure an identity broker as a default and
Keycloak would always delegate to this broker without showing the login
screen. Who removed this and why? Was it a mistake?
Thanks,
Bill
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
2860
days inactive
2861
days old
3 comments
3 participants
participants (3)
-
Bill Burke -
Marek Posolda -
Stian Thorgersen