I’m working on a multi-tenant application, and authentication is handled through Keycloak. Each organization represents a tenant, and I want to use only three identity providers (IdPs): one for Microsoft, one for Google, and one for Oracle.
My goal is to control which tenant is authorized to use which IdP. However, Keycloak currently requires creating a new, unique IdP configuration for every tenant. This becomes inconvenient, especially for Microsoft, since it would mean creating a new Azure Entra ID app for every tenant.
Instead, I would like to use a single Azure Entra ID app and a single corresponding Keycloak IdP, and then have Keycloak dynamically link it to different tenants.
Is this possible in the current setup? If not, is there any plan to support this functionality in a future release?I’m using Keycloak version 26.0.8.