[keycloak-user] Skip Broker First-Time Flow?

[Peter K. Boucher]

We have a need to pre-provision user accounts that are to be accessed with
SAML from an outside IdP.  These accounts are only ever to be used via SAML
from this external IdP (i.e., we never want them to have to use a password
to verify anything to Keycloak.

 

Is there any way for the account-linking the first time the user comes in
with SAML to happen automatically and silently?

 

We understand that in some circumstances it would be a security hole to
allow someone to connect via a brokered IdP to an existing account that has
already been used, but these accounts are being created specifically to be
accessed by this particular broker.

 

Any help?

 

Thanks!

 

Regards,

Peter K. Boucher