Re: [keycloak-user] Keycloak as IdP Proxy

Thanks Stian. Is it essential that a user is created in the Identity Broker? e.g. 1.SP directs the user to the broker for login 2.User selects one of the identity providers at the broker 3.Logs in to the IdP 4.Broker accepts the login and passes attributes / roles directly through to the SP without creating a new user in the broker db? I’m trying to avoid ending up with multiple accounts in the broker IdP for the same user depending on which IdP they auth from. Thanks Adam *From:*Stian Thorgersen [mailto:sthorger@redhat.com] *Sent:* Wednesday, 21 September 2016 3:50 PM *To:* Adam Keily <adam.keily(a)adelaide.edu.au&gt; *Cc:* keycloak-user(a)lists.jboss.org *Subject:* Re: [keycloak-user] Keycloak as IdP Proxy Yes, we call it identity brokering. See https://keycloak.gitbooks.io/server-adminstration-guide/content/topics/id... On 21 September 2016 at 07:52, Adam Keily <adam.keily(a)adelaide.edu.au <mailto:adam.keily@adelaide.edu.au>> wrote: Is it possible to configure keycloak as an IdP proxy? e.g. https://spaces.internet2.edu/display/GS/SAMLIdPProxy We’re thinking about using two keycloak realms, one for our institutional users and one for externally registered users but some SP’s can only handle a single IdP. Any thoughts appreciated. Regards Adam _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user