Differences

This shows you the differences between two versions of the page.

--- en:2.0:single_sign_on:saml_keycloak [2025/05/11 00:59] – [Profile Attributes from Admidio] kainhofer
+++ en:2.0:single_sign_on:saml_keycloak [2025/05/11 02:15] (current) – [Multiple SSO providers for the same account] kainhofer
@@ Line 84: / Line 84: @@
 After choosing SAML login and loggin in with a user from Admidio, you should be logged in to Keycloak.
 {{ :en:2.0:sso:sso_saml_keycloak_08_admidio_loginform.png?direct&400 |}}
-If the account already exists (e.g. because you are in a hybrid setup with multiple identity providers, e.g. SAML and OpenID through Admidio), then Keycloak will ask for permission to add the SAML login to the existing account. The user must additionally log in to the existing account to prevent security issues:
-{{ :en:2.0:sso:sso_saml_keycloak_09_login_accountexists.png?direct&400 |}}{{ :en:2.0:sso:sso_saml_keycloak_10_login_link_login.png?direct&400 |}}
 Your user should now be logged in and have the proper permissions/roles
 {{ :en:2.0:sso:sso_oidc_keycloak_10_linkedaccounts.png?direct&600 |}}
+=== Multiple SSO providers for the same account ===
+If the account already exists (e.g. because you are in a hybrid setup with multiple identity providers, e.g. SAML and OpenID through Admidio), then Keycloak will ask for permission to add the SAML login to the existing account. The user must additionally log in to the existing account to prevent security issues:
+{{:en:2.0:sso:sso_saml_keycloak_09_login_accountexists.png?direct&400|}}{{:en:2.0:sso:sso_saml_keycloak_10_login_link_login.png?direct&400|}}
+{{ :en:2.0:sso:sso_oidc_keycloak_10_linkedaccounts.png?direct&800 |}}