2:50 p.m.
Hi Team,
Is it possible to authenticate client from one realm with the IDP of other realm?
Like, we have a case where, we have Client-A in Realm-A and we have to authenticate it
with IDP-I which is configured in Realm-B.
Is it possible in Keycloak or we need to change our approach to achieve this?
Thanks & regards,
Pankaj Mahajan
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
3:22 p.m.
Hi Pankaj,
The realms are meant to be absolutely isolated. It's not possible to authenticate a
user with an authenticator from another realm. Both realms should have the same
authenticators configured then to accomplish what you wish.
> -----Original Message-----
> From: keycloak-user-bounces(a)lists.jboss.org
[mailto:keycloak-user-bounces@lists.jboss.org] On Behalf Of Pankaj Mahajan
> Sent: Tuesday, January 9, 2018 2:51 PM
> To: keycloak-user(a)lists.jboss.org
> Subject: [keycloak-user] Inter realm authentication
>
> Hi Team,
>
> Is it possible to authenticate client from one realm with the IDP of other realm?
>
> Like, we have a case where, we have Client-A in Realm-A and we have to authenticate
it with IDP-I which is configured in Realm-B.
>
> Is it possible in Keycloak or we need to change our approach to achieve this?
>
> Thanks & regards,
> Pankaj Mahajan
>
> Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
3:28 p.m.
The only ways I know of to do so are through brokering. Once a brokered
relationship is set up, you can either:
- Have a button for "authenticate via Realm A" (or whatever text you
need). Would require users to be smart enough to know they have a
session/account established in the other realm.
- Use the "try Realm A first" authentication option.
Keycloak team might have more suggestions though.
Josh Cain
Senior Software Applications Engineer, RHCE
Red Hat North America
jcain(a)redhat.com IRC: jcain
On 01/09/2018 07:50 AM, Pankaj Mahajan wrote:
Hi Team,
Is it possible to authenticate client from one realm with the IDP of other realm?
Like, we have a case where, we have Client-A in Realm-A and we have to authenticate it
with IDP-I which is configured in Realm-B.
Is it possible in Keycloak or we need to change our approach to achieve this?
Thanks & regards,
Pankaj Mahajan
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
2308
days inactive
2308
days old
2 comments
3 participants
participants (3)
-
Josh Cain -
Kevin Berendsen -
Pankaj Mahajan