#KEYCLOAK

[@tharindunishada]

Great Video.

[@OldemiroAmericoBaloi]

I just recently subscribed to this channel, amazing content.

[@dasniko]

Thank you so much for your kind words! 🙏

[@kennethcopeland9445]

Great video. And now I am down the rabbithole watching almost all of your videos. I just upgraded from Keycloak 21 to 26.0.7 and trying to setup test out Organizations. Everything seems to work great as long as I don't set "hide on login page" to "yes". When I turn it on that flag, instead of getting an "identity-first" login screen, I still get the regular "login" screen with both username and password fields. I assume turning on that flag would switch to some kind of "identity-first" login flow, but that isn't happening automatically and I don't see any authetication flow that seems new or different. Also SSO with the extermal IDP isn't working in this case either. Any thoughts on what might be happening or what I might me doing wrong?

[@dasniko]

If you are using your existing, migrated realm, the authentication flows are not updated. Easiest way would be to create a new realm, look into the default browser flow and re-build the missing steps in your custom flow.

[@kennethcopeland9445]

@@dasniko Great ... thanks!!

[@plurallyplurally7948]

Great video, just what I needed but I'm trying to figure out how users can, through a web app create organisations, attach themself to it, invite teammates etc I would like to see the implementation in the of multi tenancy in your JS bookstore project😊 Plus themes, that is if you have the time🙏

[@mithrankannan_m_k]

Hi dasniko, I've been following keycloak since version 23. Following & using features like userProfile & Orgs. Now that I'm eager how these works by lookin to the souce code and tryna run them in dev mode. The thing is I've been facing CORS issue when UI is trying to make a call to the server. I manipulated this by using a proxy to my remote keycloak. The dev mode isn't particularly helpful in this context. Could you provide assistance, or am I missing something?. Also raised the same in the discussion forum

[@sebastienrichez6813]

Great video! I've been testing the organization feature with multiple organizations for a single user. However, when there are two organizations assigned to a user, the claims disappear from the access token. But if I assign only one organization, the claims appear correctly. Is there a current limitation of the feature ?

[@maxi1555]

It’s not supported, I was there yesterday, check the feature map

[@arbhalerao]

​​If an unmanaged user is part of 2 organizations, how can we select which organization to log into?

[@turbineduca.business]

i have this question too. I`ll in the first moment show the organization for user, when him choice i`ll register it in user atribute about last organization login. When he login agaion I`ll read the atribute and will redirect him. It`s my ideia. Hugs

[@maximilianocolman8271]

Nice video, quick question, is there any way to allow to the user in a second or first step select one active organizations?.

[@maxi1555]

Not supported

[@szz7746]

Hi Niko, great videos and content. As understand Keycloak 26 has extention "Home IdP Discovery" all features embeded? Thanks

[@dasniko]

Keycloak does not have the extension embedded. The organization feature is a complete separate feature with similar functionality. If it fits your needs, you can probably replace the extension by organizations. If not, then not.

[@junaidahmed9704]

do you think it can replace shibboleth?

[@f.d.i4807]

if user exists in 1 only org the token contains the organization but if user exist in many orgs the token not contains the oragnizations

[@rakheendama6141]

Thank you. It’s just what I needed. Is there currently any built-in role/solution for having a admin user just for an organization?

[@dasniko]

no, this is. currently not supported

[@AliIftikhar-ul1rw]

hi Niko. can you please help me with a particular requirement. I want have 1-to-many realtionship in userprofile. like im already managing the user info email password and so many other attribute. but now the requirement is to have skills against the user. skills is an object has skill_level, skill_name, id and other thing. So user can have multiple skills and how can i establish this 1-to-many relation? if i try to get unserinfo it will perform the join and come with user with its skills. plz help me with that

[@dempile]

but its not a finished functionality, still roles and groups , etc

[@dasniko]

Don't know what's on the agenda/roadmap of the Keycloak project. If something is "finished" depends always on the requirements on have. What is required for the one, might be not wanted by the other.

[@krlsdu]

How this works when using the FIDO flux togheter with the organization flux??

[@dasniko]

What do you mean with "flux"? This is not an official Keycloak term...!