goauthentik / goauthentik/authentik

Redirect user to correct federated SSO login based on email

Open
#6,224 11 comments 5 reactions 1 assignee Assigned to @BeryJu View on GitHub
documentation enhancement/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 2h
Merged PRs (30d)
659

Description

**Describe your question**
With the `default-authentication-flow` the login page asks for a username and has links for federated login as well.

If a SSO user exists, and they type their email into the login box, they progress to the password form, however no password will work as they must use federated login. Is there a way to detect that a valid email/username was provided and automatically redirect the user to the associated federated login page instead of prompting them for a local user password?

**Version and Deployment (please complete the following information):**

- authentik version: 2023.5.4
- Deployment: docker-compose

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.