Differences

This shows you the differences between two versions of the page.

--- en:2.0:single_sign_on:oidc_keycloak [2025/05/11 02:09] – created kainhofer
+++ en:2.0:single_sign_on:oidc_keycloak [2025/05/11 02:13] (current) – [Setup completed, test Single-Sign-On] kainhofer
@@ Line 99: / Line 99: @@
 After choosing OpenID login and logging in with a user from Admidio, you should also be logged in into Keycloak.
 {{ :en:2.0:sso:sso_oidc_keycloak_08_admidio_loginform.png?direct&400 |}}
-If the account already exists (e.g. because you are in a hybrid setup with multiple identity providers, e.g. SAML and OpenID through Admidio), then Keycloak will ask for permission to add the SAML login to the existing account. The user must additionally log in to the existing account to prevent security issues:
-{{ :en:2.0:sso:sso_saml_keycloak_09_login_accountexists.png?direct&400 |}}{{ :en:2.0:sso:sso_saml_keycloak_10_login_link_login.png?direct&400 |}}
 Your user should now be logged in and have the proper permissions/roles
 {{ :en:2.0:sso:sso_oidc_keycloak_10_linkedaccounts.png?direct&600 |}}
+===== Multiple SSO providers for the same account =====
+If the account already exists (e.g. because you are in a hybrid setup with multiple identity providers, e.g. SAML and OpenID through Admidio), then Keycloak will ask for permission to add the SAML login to the existing account. The user must additionally log in to the existing account to prevent security issues:
+{{:en:2.0:sso:sso_saml_keycloak_09_login_accountexists.png?direct&400|}}{{:en:2.0:sso:sso_saml_keycloak_10_login_link_login.png?direct&400|}}
+{{ :en:2.0:sso:sso_oidc_keycloak_10_linkedaccounts.png?direct&600 |}}