Keycloak does not send login_hint to Azure AD

Configuring the server
1

Hello.

Keycloak (v26) does not send login_hint to Azure AD, despite the fact that “Pass login_hint” is enabled.

Maybe the problem is in my Authentication Flow, i don’t know.

I use custom read-only User Storage. In this storage, the authorization method is specified for each user: password or Azure AD.

I set up Authentication Flow like this:

  1. The Username Form is displayed first (a form without a password).
  2. User Storage write the user’s authorization method in the user’s attribute.
  3. Depending on the value of this attribute, there are two conditional flows (Condition - User Attribute): Password Form (work like a charm) or Identity Provider Redirector (to Azure AD).

When the Identity Provider Redirector is executing, the user is known (I suppose), but login_hint is not sent.

SOLVED!
I add authSession.setClientNote(OIDCLoginProtocol.LOGIN_HINT_PARAM, username) in my custom User Storage.