Keycloak: How to auto redirect Keycloak user to OKTA SSO page instead of clicking on button?

Question

I have followed the guide https://ultimatesecurity.pro/post/okta-saml/ , to configure OKTA Saml with keycloak. After this configuration, I see Okta/saml login button on login page, clicking on which, the user is redirected to Okta login/SSO.

Now, is there a way to avoid clicking on this button everytime such that when the keycloak login page appears, user is auto redirected to Okta SSO automatically instead of shown keycloak login form with okta redirect button?

If not, is it possible to enter okta username password within the keycloak form fields and keycloak have it validated internally from Okta?

This requirement is because the customer is using only Okta as IDP and does not have any other like LDAP etc and clicking on a button seems overhead.

Rimma

Answer 1

The solution is pretty simple.

1. Go to Realm -> Configure -> Authentication

2. Go to Flows -> Browser-> Identity Provider Redirecter -> Actions -> Config

3. Enter the saml / okta identity provider name that you have created for your realm

(as you can see in my case it was saml-okta-41)

Rimma

I did the steps to redirect keycloak1 to keycloak2. But now I cannot access the keycloak 1 administration console at all, as its always redirecting the user to keycloak2. Is there a way to undo this setting? :D – Queer

@NirojanSelvanathan I have not tried but I guess you can try to login to master realm and then change the settings in corresponding realm. I hope you did not make the above changes in the master realm itself cause if you did, you try to live dangerously my friend. :) – Rimma

Unfortunately I did that on the Master realm, but fortunately, it was the staging instance :) . Reverted the DB. BTW thanks I was searching for a method to auto re-direct to another keycloak. It seems we can also pass a query parameter to do this in the URL. ?kc_idp_hint=identity-server-name . Hmm these features are not verywell documented in keycloak. – Queer