# Identity Provider Redirector

The Identity Provider (IdP) Redirector in Keycloak allows users to be automatically redirected to their external identity provider, e.g. Microsoft Entra ID, without displaying the Keycloak login page.

When the IdP Redirector is configured, users accessing a Spark tenant URL are immediately redirected to the configured identity provider for authentication.

## How the redirect works

1. User opens the Spark tenant URL.
2. Spark redirects the user to Keycloak.
3. Keycloak automatically redirects the user to the configured Identity Provider.
4. The user authenticates with their corporate identity provider.
5. Keycloak receives the authentication response and grants access to Spark.

## IdP Redirector request

To configure the IdP Redirector please contact [Support](/support/faq.md) and provide the following information:

| Data                    | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Spark tenant URL        | The Spark tenant URL identifies which tenant should trigger the redirect, e.g. `https://spark.myenvironment.coherent.global/mytenant`.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Identify provider alias | <p>The identity provider alias is the internal Keycloak identifier for the configured identity provider. The IdP Redirector uses this alias to determine which identity provider users should be redirected to.<br><br>To find your IdP alias:<br>1. Open a new tab in your browser and login to the target Spark tenant. Access the <em>Keycloak console</em> from the <a data-mention href="/pages/ylWjjoVBLOcB7JZks4Cp#user-menu">/pages/ylWjjoVBLOcB7JZks4Cp#user-menu</a>.<br>2. Navigate to <em>Realm</em> and <em>Identity Providers</em>.<br>3. Select the configured identity provider.<br>4. Locate the field <em>Alias</em>, e.g. <code>azure-ad</code>.</p> |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.coherent.global/identity-and-access-management/identity-provider-redirector.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.