2026-09-30 New feature: select external IdP using script

The new feature

If there are several external identity providers, a script has been added to the external identity providers to determine whether they are valid for authentication.

Bear in mind

Please note the following points:

• If the script is empty, this logic is ignored.

• Only when the script returns "false" will this identity provider not be displayed in the list of options on the login screen.

How to configure it?

The following components must be installed:

• Federation addon 4.0.41 (or higher)

Let's look at an example

First of all, we have several external IdPs.

We can now see in Soffid IdP that authentication for internal users uses external providers.

When we try to log in, a list of all the options appears.

We have now decided that one of the external IdPs is not valid for internal users.

Now, when accessing an SP, it will no longer appear in the list.