Using a Community as an Identity Provider

Hi, 

I am trying to set up a common identity community for a customer where they can login and access other SF apps(customer - communities). 

Let's say one community is called identity and the other is called customer. I have followed the below steps.

1. I have enabled Identity Provider. 
2. I have created the Single Sign On Settings using the metadata url for the identity community IDP that was generated by Salesforce. 
3. I have created the Connected App to let the Identity provider(identity community)  know about the Service Provider(customer community)
4. I have created a permission set that is tied to the connectedApp and is assigned to an individual. 
5. Set up login mechanism for the community as set up in single sign on settings.
6. I go to Home page or customer community <domain>/customer
7. I get routed to the login page of the identity <domain>/identity/login
8. After I login with a username and password, I am getting stuck in a LOOP, where the browser goes to the identity --> customer-->identity over and over again. 
9. If I add another login mechanism for the community then the LOOP stops itself after a few tried and takes me back to the login page of the customer community. 

The user login history shows that they have logged in successfully. 

The Identity Provider Event Log shows a successful login. 

Has anyone experienced this? What am I doing wrong?

 @Ian Glazer Can someone from you team help?

Cheers, Gaurav

#Identity & Access Management #Experience Cloud