> For the complete documentation index, see [llms.txt](https://docs.coherent.global/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.coherent.global/identity-and-access-management/identity-provider-redirector.md).

# Identity Provider Redirector

The Identity Provider (IdP) Redirector in Keycloak allows users to be automatically redirected to their external identity provider, e.g. Microsoft Entra ID, without displaying the Keycloak login page.

When the IdP Redirector is configured, users accessing a Spark tenant URL are immediately redirected to the configured identity provider for authentication.

## How the redirect works

1. User opens the Spark tenant URL.
2. Spark redirects the user to Keycloak.
3. Keycloak automatically redirects the user to the configured Identity Provider.
4. The user authenticates with their corporate identity provider.
5. Keycloak receives the authentication response and grants access to Spark.

## IdP Redirector request

To configure the IdP Redirector please contact [Support](/support/faq.md) and provide the following information:

| Data                    | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Spark tenant URL        | The Spark tenant URL identifies which tenant should trigger the redirect, e.g. `https://spark.myenvironment.coherent.global/mytenant`.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Identify provider alias | <p>The identity provider alias is the internal Keycloak identifier for the configured identity provider. The IdP Redirector uses this alias to determine which identity provider users should be redirected to.<br><br>To find your IdP alias:<br>1. Open a new tab in your browser and login to the target Spark tenant. Access the <em>Keycloak console</em> from the <a data-mention href="/pages/ylWjjoVBLOcB7JZks4Cp#user-menu">/pages/ylWjjoVBLOcB7JZks4Cp#user-menu</a>.<br>2. Navigate to <em>Realm</em> and <em>Identity Providers</em>.<br>3. Select the configured identity provider.<br>4. Locate the field <em>Alias</em>, e.g. <code>azure-ad</code>.</p> |