You seem to want what is called IdP-initiated workflow that works for
SAML apps [1] but not for OIDC. See this thread [2] for furtner info.
[1]
We have people that have bookmarked the login page of keycloak so
that they can return there and authenticate, rather than go to the client app page and be
redirected.
This doesn't work because the bookmark they have contains time sensitive information,
e.g. the nonce and state etc. So they can authenticate correctly, but when redirected to
the application it fails.
Is there anything that can be done for this situation? I thought perhaps including the
information as post body parameters and doing a post rather than redirecting with query
string parameters, but this doesn't work, POST is not an accepted http method. Also I
assume that returning there from a bookmark won't work either because that post body
information will be missing...
Matt
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user