Schwab × Forge

SSO Launch Pad

Mocked IdP-initiated single sign-on for Schwab SAC & Retail, powered by Keycloak.

Launch a flow

Choose an entry point

IdP-initiated SAML · Keycloak → Okta → Marketplace

i How it works hover to expand

1 Your browser hits the IdP's IdP-initiated SSO endpoint — no AuthnRequest needed.

2 Keycloak signs a SAML assertion carrying the mocked SAC or Retail claims.

3 An auto-submit form POSTs the assertion to Okta's ACS URL.

4 Okta validates it, JIT-provisions the user, and opens an Okta session.

5 Okta redirects to the Forge Marketplace for the chosen environment — no login prompt.