Multiple apps SAML and 18.0.2

[elmidwill]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

So I got around to trying this today. It doesn't appear to work with SAML authentication on version 18.0.2, or more likely I am not doing something correctly.

After adding the provider, restarting KC, I created a copy of the browser flow, edited it as per instructions. I then created the role in a client, and changed the "Authentication Flow Overrides" to the newly created flow which has the restrict feature enabled. when I try to login from an app using SAML, it redirects to KC and immediately presents me with "Invalid username or password" without prompting for either.

Expected Behavior

No response

Steps To Reproduce

No response

Version

- Keycloak:
- This extension:

Anything else?

No response

[sventorben]

Hello @elmidwill,

I have this running on several Keycloak instances using SAML. So, I am pretty sure it works with SAML in general.
Could you please post a screenshot of your authentication flow and relevant client configuration?
Are you trying to use the role-based or policy-based mode?

Regards
Sven-Torben

[elmidwill]

Here is the authentication flow

I am trying to use role-based mode.

Maybe I am not attaching the flow correctly. I go to clients --> choose a client --> authentication flow overrides --> and change the browser to the new flow with the access restriction in it.

[sventorben]

I think that your flow is misconfigured. Keycloak does not allow to combine required and alternative executions on the same level. You should see a corresponding entry in your server logs.
Please take a look at issue #9 for details.

[elmidwill]

Thanks. I got it working.