Identity provider redirector

The identity provider (IdP) redirector in Keycloak allows users to be automatically redirected to their external identity provider, without displaying the Keycloak sign-in page.

When the IdP redirector is configured, users accessing a Spark tenant URL are immediately redirected to the configured identity provider for authentication.

How the redirect works

1. The user opens the Spark tenant URL.

2. Spark redirects the user to Keycloak.

3. Keycloak automatically redirects the user to the configured identity provider.

4. The user authenticates with their corporate identity provider.

5. Keycloak receives the authentication response and grants access to Spark.

IdP redirector request

This feature is only enabled on certain environments and tenants. Contact support for more information about this feature.

Data	Description
Spark tenant URL	The Spark tenant URL identifies which tenant should trigger the redirect, e.g. https://spark.myenvironment.coherent.global/mytenant.
Identity provider alias	The identity provider alias is the internal Keycloak identifier for the configured identity provider. The IdP redirector uses this alias to determine which identity provider users should be redirected to. To find your IdP alias: 1. Open a new tab in your browser and sign in to the target Spark tenant. Access the Keycloak console from the User menu. 2. Navigate to Realm and Identity Providers. 3. Select the configured identity provider. 4. Locate the field Alias, e.g. azure-ad.