cleanUrl: "/idp"

Background

Because of company acquisition, the company decided to use Microsoft M365 services such as email, chats, and all.

There are a lot of internal web services and get logged in through Single Sign On application, I had to somehow come up with integrating with Azure AD.

Very first draft of my plan

Very first draft of my plan

However, with Keycloak and SAML Connection with Azure SSO, I don't need to go that complicated.

Using Keycloak IdP function, and create a new SSO Enterprise App on Azure, I was able to integrate SSO and M365 accounts, flawlessly.

Scenario for both Keycloak (SSO) and M365 not logged in

Scenario for both Keycloak (SSO) and M365 not logged in

Scenario for Keycloak (SSO) logged in and not in M365

Scenario for Keycloak (SSO) logged in and not in M365

Scenario for M365 logged in and not in Keycloak (SSO)

Scenario for M365 logged in and not in Keycloak (SSO)