keycloak-home-idp-discovery icon indicating copy to clipboard operation
keycloak-home-idp-discovery copied to clipboard

[Feature] Supporting domain hints

Open domdomegg opened this issue 7 months ago • 0 comments

Is there an existing feature request for this?

  • [X] I have searched the existing issues

Is your feature related to a problem? Please describe.

In some situations we might know what the user's domain should be, but not their actual email. For example, we might know they should be logging in to example.com.

It'd be nice to automatically redirect these users to the right provider.

Describe the solution you'd like

The ability to either:

  1. Set the login_hint to a domain, e.g. login_hint=example.com
  2. Set the hd (like Google), e.g. hd=example.com
  3. Set a domain_hint (like Azure), e.g. domain_hint=example.com

Then if it matches a configuration it should take the equivalent action as to if [email protected] was given, although not forwarding on the placeholder@ part.

Describe alternatives you've considered

One workaround is to use login_hint and set it to something like [email protected]. However, this user part is then forwarded onto the provider which doesn't work well with some as the users then need to delete the filled in user part e.g. Google (or forwarding has to be disabled, which also adds friction).

Anything else?

No response

domdomegg avatar Dec 12 '23 23:12 domdomegg