External IDP - account linking with multiple local accouts

Configuring the server
1

Hi all,
my company asked me to evaluate this scenario…

  • a user lands to our keycloak login page and choose to be logged in using an external IDP
  • the user enter his credentials in the ext IDP i.e with username fake@mail.com
  • in our keycloak we have 3 user accounts with that email fake@mail.com

The question is:

  • is it possible ( and in case how ) to let the user to choose which local account to use every time he/she logs in?

Until now we managed the account linking easily because there were a 1-1 relation between users in the External IDP and in our keycloak.

Thanks in advance,
Ale

2

I believe there is a setting you can use to check this - First Login Flow: keycloak-documentation/first-login-flow.adoc at main · keycloak/keycloak-documentation · GitHub

3

Thought it wasn’t possible to have the same email address on more than one user in keycloak.