Determine if user is logged in with IdP or not

Getting advice
4

This might help:

After a user login from an external IDP, Keycloak stores user session note data that you can access. This data can be propagated to the client requesting log in using the token or SAML assertion passed back to the client using an appropriate client mapper.

identity_provider

The IDP alias of the broker used to perform the login.

identity_provider_identity

The IDP username of the currently authenticated user. Often, but not always, the same as the Keycloak username. For example, Keycloak can link a user johnto a Facebook userjohn123@gmail.com. In that case, the value of the user session note isjohn123@gmail.com` .

You can use a Protocol Mapper of type User Session Note to propagate this information to your clients.

https://www.keycloak.org/docs/latest/server_admin/#available-user-session-data

4 Likes