Configure the user experience
Set SSO as the only sign-in experience for local users
読み終わるまでの所要時間 1 分最終更新 1日前
After you have completed the previous tasks, you have enabled SSO but haven't disabled the built-in Keycloak sign-in experience for local accounts. Users can choose to sign-in with their Keycloak credentials or through the configured SSO identity provider.
If you must disable sign-in to Keycloak for local accounts, complete these steps:
-
In Keycloak, go to Configure > Authentication.
-
On the Flows tab, duplicate theauthentication flow.
browser -
Name the new flow, for example,.
browser - sso only -
Delete the forms section from the new flow.
-
Set Default Identity Provider to the alias of the identity provider that you have created in the previous task, for example,.
unity -
To bind the new flow to the browser flow, complete these steps:
- Select the ellipsis menu (…) next to the new flow.
- Select Bind flow.
- Set the binding type to Browser flow, and then select Save.