search

p2-inc / keycloak-orgs

Single realm, multi-tenancy for SaaS apps
Other
361 stars 65 forks source link

Login initial screen should ask for domain and NOT email #210

Closed konsri closed 3 months ago

konsri commented 3 months ago

I've added Home IDP Discovery Authenticator. When I tried to login it asks for username/email after entering it asks me IDP's username/password. We can give different email in first screen and different email for IDP. For the first login screen it is actually looking for the domain name and NOT email. Why can't we have the screen which asks for the domain and NOT email. Any suggestions?

xgp commented 3 months ago

It is not asking for the IDP's username/password. It is failing to match an organization IdP based on email domain, and it is presenting a normal username/password login. If it had matched the email domain, it would have redirected to your configured IdP.

There's a quick video showing how a sample setup would work https://youtu.be/wAeT07JGhOI?si=NWDqMGpKAjWAs0mi

For the first login screen it is actually looking for the domain name and NOT email. Why can't we have the screen which asks for the domain and NOT email.

Sounds like you have a pretty strong opinion about what should happen. You should create a custom Authenticator that does that.