On 02/09/2016 03:43 PM, Steve Nolen wrote: > Ah! So I've been trying to configure keycloak as an SP instead of an > IdP. Is this a bad idea? It seems to support both. This is the > metadata from SP descriptor endpoint. My bad, I'm so used to using Keycloak as an IdP I totally forgot about teh SP component. -- John