> For the complete documentation index, see [llms.txt](https://docs.coherent.global/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.coherent.global/identity-and-access-management/single-sign-on/identity-provider-redirector.md).

# Identity provider redirector

The identity provider (IdP) redirector in Keycloak allows users to be automatically redirected to their external identity provider, without displaying the Keycloak sign-in page.

When the IdP redirector is configured, users accessing a Spark tenant URL are immediately redirected to the configured identity provider for authentication.

## How the redirect works

1. The user opens the Spark tenant URL.
2. Spark redirects the user to Keycloak.
3. Keycloak automatically redirects the user to the configured identity provider.
4. The user authenticates with their corporate identity provider.
5. Keycloak receives the authentication response and grants access to Spark.

## IdP redirector request

{% hint style="info" %}
This feature is only enabled on certain environments and tenants. [Contact support](/support/contact-support.md) for more information about this feature.
{% endhint %}

| Data                    | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Spark tenant URL        | The Spark tenant URL identifies which tenant should trigger the redirect, e.g. `https://spark.myenvironment.coherent.global/mytenant`.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| Identity provider alias | <p>The identity provider alias is the internal Keycloak identifier for the configured identity provider. The IdP redirector uses this alias to determine which identity provider users should be redirected to.<br><br>To find your IdP alias:<br>1. Open a new tab in your browser and sign in to the target Spark tenant. Access the <strong>Keycloak console</strong> from the <a data-mention href="/navigation/navigation-menu.md#user-menu">/pages/ylWjjoVBLOcB7JZks4Cp#user-menu</a>.<br>2. Navigate to <strong>Realm and Identity Providers</strong>.<br>3. Select the configured identity provider.<br>4. Locate the field <strong>Alias</strong>, e.g. <code>azure-ad</code>.</p> |