Hi,
We are using Keycloak as a SAML IdP and have plugged in a custom authenticator to handle
the browser flow. The authenticator relies on a custom URL parameter that is present in
the initial SAML Authn request to Keycloak.
We found that when the Keycloak SAML IdP receives a SAML Authn request (which also
contains our custom URL parameter) it exchanges that request with a code and redirects the
browser to itself at which point the control reaches our custom authenticator. This
redirect causes our custom URL parameter from the initial request to not be available to
our custom authenticator. Is there anyway to propagate our custom URL parameter to this
second request and thereby have it available to our custom authenticator.
Thanks in advance for your help.
Regards
-sud