Keycloak IdentityProviders

• https://www.keycloak.org/docs-api/latest/javadocs/org/keycloak/broker/provider/IdentityProvider.html

• https://www.keycloak.org/docs-api/latest/javadocs/org/keycloak/representations/idm/IdentityProviderRepresentation.html#authenticateByDefault

 "identityProviders": [
   {
     "alias": "okta",
     "displayName": "Okta",
     "providerId": "oidc",
     "enabled": true,
     "updateProfileFirstLoginMode": "on",
     "trustEmail": true,
     "storeToken": false,
     "addReadTokenRoleOnCreate": false,
     "authenticateByDefault": true,
     "linkOnly": false,
     "config": {
       "clientId": "<okta-client-id>",
       "clientSecret": "<okta-client-secret>",
       "discoveryEndpoint":
 "https://<your-okta-domain>/oauth2/default/.well-known/openid-configuration",
       "defaultScope": "openid profile email groups",
       "syncMode": "IMPORT"
       #"useJwksUrl": "true",
       #"validateSignature": "true",
       #"pkceEnabled": "false"
     }
   }
 ]

Related

• Gemini Terraform code: Okta Keycloak integration
• authenticateByDefault
• redirect_uri
• kcadm.sh get users
• identityProviderMappers

See also

• identityProviders: syncMode
• KC OIDC, UserRealmRoleMappingMapper / UserClientRoleMappingMapper, clientId
• helm install keycloak, identityProviders, identityProviderAlias, IdentityProviderMappers