Keycloak Authentication Set up OTP after registration approved

Getting advice
1

Hello all

I am setting up keycloak with OTP setting. Everything went great except for one scenario, which is the case if the new user wants to register and the OTP is required to be set up (force).

The scenario I want is
[User send registration request → Admin Approves → User set up OTP on his first login]

but currently what it does is
[USer send request → Asked to setup OTP → create registration request ans send → Admin Approves]

Below is my current set up for browser flow, which is set as Post login flow for Identity provider

image
image1309×1079 32.8 KB

Please give me an advice what do I need to do.

2

You could achieve what you want like this:
For Configure OTP required action, turn off “set as default action”
When a user register, the admin set the Configure OTP required action on the user while approving.
The scenario will look like this
[User send registration request → Admin Approves and set required action on User → User set up OTP on his first login]