EVOKE MEDIA · IDENTITY LAB

Test Application 3

Sign in through Keycloak

Keycloak brokers authentication to AD FS. AD FS selects Duo or Entrust using the user's lab group.

Open Application 4 · Sign in again

Existing Keycloak sessions can complete a second application login without another AD FS challenge. No raw assertions or tokens are displayed.