Skip to main content
Razvan Tufisi

Razvan Tufisi

Phase Two

Razvan is a Senior Staff Engineer at Phase Two, and has worked on Keycloak and identity infrastructure for almost 10 years. He is the principal author of many of Phase Two's popular open-source extensions.

View all authors

Keycloak SAML Identity Provider (IdP) Initiated Flow with Okta

· 11 min read
Razvan Tufisi
Razvan Tufisi
Phase Two

IdP Initiated Flow​

When implementing SAML for the establishment of an Identity Provider, two primary options are available:

  1. Service Provider (SP) initiated
  2. Identity Provider (IdP) initiated

The SP initiated flow is widely recognized by users due to its straightforward configuration, which is merely the exchange of some metadata. In contrast, the IdP-initiated flow is less intuitive and involves an additional step that may not be readily apparent to many users. The purpose of this blog is to elucidate the steps necessary to successfully execute the IdP-initiated flow. We will setup a full example

A fundamental understanding of SAML 2.0 and Keycloak is required to effectively follow the provided instructions.