[keycloak-user] Execution Flow

[Stuart]

Hi All,

I'm trying to add a step in the the KC authentication flow that just has a
notification/message page to say something like 'You're all setup' or 'you
made it through registration, well done'. :-)

I've tried creating an authentication provider which just display the
message (via a ftl template) which works great. However....  during the
registration process I want he users to set their password and set up OTP.
Now, because (I guess) the PW reset and OTP forms are 'required actions'
they are skipped for the actual user authentication.  So once all
authentication providers are successful, KC moves onto the required actions
and displays the forms for them.  This results in my 'message' provider
showing before the PW and OTP setup pages.

So I'm thinking that I should make the 'message' provider return success on
authentication and add 'Required Actions'.  Does that sound like the way to
go?  My only concern is that I still cannot get the PW (re)set page to
appear before the OTP page (even if I change the order under the 'Required
Actions' tab in the authentication setup), so I'm not sure how KC is making
the decision on which page to show next.

(I thought about using the T&C page for the message page, but I don't know
how to tell KC that its a new user, as the user is added to KC before they
get to login/register.)

Any thoughts are appreciated.

Stuart