SSO SAML with Keycloak about controlpanel HOT 5 OPEN

Hello! Thank you for your tutorial.
Unfortunatlly, can not use the first step: "Load metadata from https:///auth/realms/master/protocol/saml/descriptor".
Please, can you explain what should I full in this gaps:

• IdP Entity ID
• IdP Single Sign-On Endpoint URL
• IdP Single Logout Endpoint URL
• NameID Format
  It would be great if you are able to attach image explonation of using OnlyOffice SSO Control panel (screenshot).

from controlpanel.

Hello! Thank you for your tutorial.
I encountered an endless redirect after successful authorization (user session is displayed in keycloak -> Clients -> Sessions). I analyzed the connection with the SAML-Tracer tool and saw a infinity loop of the following picture.

Can you see anything errors? Or maybe you got this err, thank you very mutch

from controlpanel.

Can not use the first step: "Load metadata from https:///auth/realms/master/protocol/saml/descriptor".

I fixed the text. The <domain> and <keycloak-base> parts were removed at some places. I hope you understood that you need to replace these parts with data from your environment. See for example https://www.itsfullofstars.de/2020/02/keycloak-download-saml-2-0-idp-metadata/ how to get the SAML descriptor, if the url does not work.

Do know that this is quite basic knowledge for Keycloak-administration. I therefore strongly suggest you read a bit further, to prevent from making some serious mistakes.

from controlpanel.

@VincentSC I want to add additional parameters during SSO login, such as kc_idp_hint=github. What should I do

from controlpanel.

@YuanZhencai I don't know, as I'm not using that myself. Sorry.

from controlpanel.