Home Realm Discovery

Alianza supports multiple identity providers. By default, users see an IdP-picker prompt during the Authorization Code flow. To skip that prompt and route the user directly, send a login_hint parameter on the authorize request.

GET {baseUrl}/authorize
  ?response_type=code
  &client_id={client_id}
  &redirect_uri=https://your-app.example.com/callback
  &scope=experience-connections:manage experience-assignments:manage
  &state={random_state}
  &code_challenge={code_challenge}
  &code_challenge_method=S256
  &login_hint=+14155551234

The hint is a phone number in E.164 format (e.g. +14155551234).

Preserving hints from inbound URLs

When a user arrives at your portal via a deep link from a Service Provider portal with no active session, that inbound URL may carry an org_code or login_hint query parameter. Forward those parameters from the inbound URL onto the Alianza /authorize request. This lets Alianza skip its own Home Realm Discovery step and route the user directly to the correct identity provider.

If you don't forward the hint, the user will see the IdP picker even though the upstream system already knew which IdP to use.

See also