Re: [keycloak-user] Identity Provider Saml HTTP-Redirect binding
Bill,
Keycloak is delegating the login to a external IDP. It is a hardcoded
string but If it could be a little bit more flexible that would be great.
If we could add custom key=value pairs to the url. Which are defined per
SAML definition.
Thanks,
Henk
On 01/09/15 22:44, "keycloak-user-bounces(a)lists.jboss.org on behalf of
Bill Burke" <keycloak-user-bounces(a)lists.jboss.org on behalf of
bburke(a)redhat.com> wrote:
IdP=LoginFormIdentityProviderPlanOn
You need to add this? Is it a hardcoded string? Is Keycloak the IDP?
Or is Keycloak delegating login to an external IDP?
We don't support this currently. But it may be something I can quickly
add for the next release.
On 9/1/2015 1:20 PM, Henk Laracker wrote:
> Hi,
>
> We use keycloak with a SAML Identity provider, we have to use
> http-redirect binding.
>
> The customer expect a SAML request something like
>
>
>https://samlfeddev.cscdev.com/EasyConnect/SSO/redirect.aspx?IdP=LoginForm
>IdentityProviderPlanOn&SAMLRequest=rVNNj9MwFPwrke%2BOk5ayjdUUlS2ISIWN2sKB
>C3Ls110Lxw5%2BTt
>
> But keycloak generates a response like
>
>
>https://samlfeddev.cscdev.com/EasyConnect/SSO/redirect.aspx?SAMLRequest=r
>VNNj9MwFPwrke%2BOk5ayjdUUlS2ISIWN2sKBC3Ls110Lxw5%2BTtj
>
> How do I achieve this in keycloak
> Henk
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user