I have a use case that I want to see if Keycloak would be a good fit. I want to use Keycloak as an Idp provider, ldap as federated user source with multiple applications.
Lets say there are 4 applications. I would like user to be able to access their account page and see all apps they have access to, and from there initiate a Idp initiated SAML login. Some users might only have access to 3 apps, so when they login to their account page they should only see the 3 aps. Others 2 and some only 1. Is this possible with Keycloak?