Identity Provider (IDP)
Questions tagged [idp]
342 questions
3
votes
2 answers
Keycloak bulk user import
Does anyone have any thoughts on how one might import a very large number of users into Keycloak.
We are in the process of upgrading from 2.5.5 to 4.0.0 and have had to switch from MongoDB to MySQL. We have been able to export our user base but with…

Chris Latta
- 31
- 1
- 1
- 3
2
votes
0 answers
User attributes for OIDC standard claims using Keycloak
I am using Keycloak as an identity provider for an application. The users can create an account directly via Keycloak and the users are required fill some personal information that maps to OIDC standard claims when registering.
I added the…

DurandA
- 1,095
- 1
- 17
- 35
2
votes
1 answer
Token exchange grant support in AWS Cognito
I am working on a cloud native microservices based application deployed in AWS. This application should use a OIDC based IdP (preferably AWS Cognito). The authentication and authorization flow are as follows. Once the user logs in using…

Arindam Ghosh
- 98
- 5
2
votes
0 answers
How can I tell a password manager which username/password to autofill with?
Question
How can a webform tell the browser which username and password are appropriate inputs when autofilling if there are multiple entries for the same (primary) domain?
Context
I design an authentication system that offers multiple identity…

Merchako
- 789
- 1
- 8
- 19
2
votes
1 answer
Keycloak IdP Post Login Flow - Roles Condition failure
I'm trying to set up Keycloak to restrict access to clients depending on their roles. Since the users authenticate against AAD, I'd like to use the "Post Login Flow" configured in Identitity Provider settings. Fortunately, for the moment we want to…

Michael F
- 43
- 2
2
votes
0 answers
Keycloak IDP forwarded auth does not redirect to front-channel logout URL
Situation
For my web application, I have set up a keycloak (v18.0.0) realm with an external SAML IDP.
After successfully logging in, the application is using its own cookies (I can't change this since this is an external piece of software) and has a…

Theo
- 2,262
- 3
- 23
- 49
2
votes
0 answers
Identity Broker vs. Federation Gateway
I am trying to understand differences between Identity Broker and Federation Gateway and where and when should you use these two services.
Thanks for all kind of advice.

user217648
- 3,338
- 9
- 37
- 61
2
votes
0 answers
How to select and work with a particular Provider (OIDC provider) added on Google Could - Identity platform by using server side java code
I have added these 2 identity providers (refer attached images) to Google Cloud -->Identity Platform
Email/Password
OIDC Connect (oidc provider)
Now if you see there is a User section as well under Identity Platform
So I have added some random…

slow motion
- 33
- 4
2
votes
2 answers
What scope does "idp" belong to in IdentityServer4?
My MVC client's access token contains an "idp" claim that my simple server-to-server client's token doesn't. I don't explicitly request idp on either clients, so where is this claim coming from? I thought it was part of "openid", and since it is…

Alexu
- 1,015
- 2
- 12
- 32
2
votes
0 answers
Identity Server Resource Owner flow with external Identity Provider
We have a project where the client requests the use of their own Identity Provider, in this case, it is SalesForce.
We secure the application using IdentityServer 3 and have configured it that for this client (based on parameters) it will use…

Georges Legros
- 2,494
- 2
- 23
- 42
2
votes
1 answer
How to create a SAML IDP that authenticates with an API from scratch
Right now I'm rolled in a project where we want to create an SAML IDP with Node.
Problem:
We have a system that implements an API REST and this API authenticates users, its response has the information of the authenticated user... just as an API…
2
votes
0 answers
Keycloak: permanent API key
I was searching a lot for a way to generate permanent tokens for users in Keycloak, and have discovered a few ways but no one of them really met my needs. Now, I'm thinking to develop another application to map user access/refresh tokens to a API…

alcidesmig
- 45
- 1
- 7
2
votes
0 answers
SSO - Multiple IDP's
How to configure multiple IDP's? One application is tied to 2 IDP's at a time, Primary should be active and secondary should be in standby mode/passive, is this even possible?
Please provide some insights on this topic.

Nagesh Krishnamurthy
- 21
- 1
2
votes
0 answers
How to configure ADFS with react js app for sso using passport-saml and express js?
I've my reactjs application which needs sso. I've decided to have ADFS as my IDP. How to configure adfs with my react js application. How to use passport saml in reactjs for sso?can i have detailed steps to configure this since am new to this sso…

Sreejith
- 45
- 1
- 1
- 6
2
votes
2 answers
Enable Email/Password Identity Provider on GCP via Terraform
I'm using the identity_platform_oauth_idp_config teraform resource to configure some OIDC providers on the Google Identity Platform, which is working as expected.
The Identity Platform also supports Email/Password and Phone as configurable…

apidae
- 529
- 2
- 5
- 14