keycloak-restrict-client-auth + keycloak-home-idp-discovery

[gerardnorton]

I am currently testing the integration of these two extensions:
https://github.com/sventorben/keycloak-restrict-client-auth
https://github.com/sventorben/keycloak-home-idp-discovery

When using keycloak local accounts, the keycloak-restrict-client-auth extension works perfectly well using the policy-based mode.

When I use federated accounts with an authentication flow based on the keycloak-home-idp-discovery extension, the access restriction does not work.

I have also tried setting up a flow for access verification, in the post-login of the federated idp configuration.

[gerardnorton]

I myself answer how I have been able to solve it, after seeing this answer
#284 (comment)

This is the main authentication flow for local keycloak users, which I have configured on my clients:

I then set up a new flow that I use in the “Post login flow” of my configured identity provider:

This works without any problems.

[gerardnorton]

Everything seems to be working properly :-)