As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [keycloak]

Keycloak is an integrated single sign-on (SSO) and identity manager (IDM) for browser apps and RESTful web services. It is built on top of JBoss and WildFly, it complies with the OAuth 2.0, Open ID Connect (OIDC), JSON Web Token (JWT) and SAML 2.0 specifications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

Autofilling keycloak user data from Azure AD after login

I'm using keycloak to register and login users from Azure AD, I want to link the username and email directly from the Azure AD by following the claim I get from the ID token (https://learn.microsoft....
Mohamad Darsa's user avatar
1 vote
0 answers
11 views

.NET 7 API accepting revoked token by Keycloak

.NET 7 API accepting revoked token by Keycloak Scenario: .NET 7 API is accepting the token even that token have been revoked by Keycloak. Simple sample of configuration auth: builder.Services....
Augusto Ferbonink's user avatar
0 votes
0 answers
10 views

keycloak kc_idp_hint redirect uri always return 401 unauthorised error

I'm new to keycloak. I tried to implement keycloak in my mvc web application, and i placed one anchor tag with href value mentioned in below format. When I click anchor tag it redirect to identity ...
Ezhumalai's user avatar
  • 143
1 vote
1 answer
25 views

Set up Keycloak 21 with postgres from quay image

I have been trying to set up Keycloak for production without any success. My Keycloak docker-compose contains: SSL Postgres My build does not contains an inverse proxy. This is my Docker compose: ...
jogarcia's user avatar
  • 2,225
0 votes
0 answers
9 views

What causes 'The OAuth client was not found Error 401: invalid_client' when trying to authenticate with Google OAuth 2.0 using Keycloak and JHipster?

Using Jhipster I'm expecting a login from google oauth client via keycloak authenticator but get the following error: The OAuth client was not found. Error 401: invalid_client The keycloak redirect ...
karl's user avatar
  • 13
0 votes
0 answers
5 views

Unable to install Keycloak Angular 15.2

Unable to install Keycloak in Angular (v15.2) using npm. But able to install keycloak-js npm install keycloak-angular keycloak-js Getting this Error!!! Any specific version need to be used?
sushmitgos's user avatar
0 votes
0 answers
9 views

NbOAuth2AuthStrategy with Keycloak returning CORS error when dockerized

I have dockerized an Angular webapp that is logging in to Keycloak using Nebular NbOAuth2AuthStrategy. The application was working correctly when running on my local machine and connecting to Keycloak ...
gbos's user avatar
  • 493
1 vote
0 answers
7 views

How to fix broken Keycloak account management page

I have a keycloak server (newest version bare metal via java) running on an cloud server with the following configuration: KC_HOSTNAME_STRICT=false KC_HOSTNAME=sso.ecample.com KC_PROXY=edge The ...
Matt's user avatar
  • 167
-1 votes
0 answers
8 views

Keycloak server on Kubernetes cluster not accessible via HTTPS

I am trying to run a keycloak server on my kubernetes cluster as OIDC authority for the kube-api. But I am not able to access keycloak via HTTPS. I am using HA Proxy Ingress Controller which is ...
tobiwanobi's user avatar
0 votes
0 answers
19 views

Keycloak access token gets invalid even before the Access Token life span gets expired

i am using keycloak in my client application for Authentication and Authorization purpose. I configured the keycloak Tokens under Relams settings as below SSO Session Idle - 8 - Hours SSO Session Max ...
Lisa's user avatar
  • 643
0 votes
0 answers
9 views

Keycloak Authorise subgroup users specific Admin permissions

I am currently facing a problem with Keycloak. I have Groups with Subgroups. In some of these Subgroups are users who need to have access to edit user in their subgroup, but I can only give them ...
CodeBoy361's user avatar
0 votes
0 answers
20 views

Spring Security + Keylock Adapter + Gateway + Kubernetes - too many redirects

I can't figure out how to set up the infrastructure in such a way that everything works. @KeycloakConfiguration @EnableGlobalMethodSecurity(prePostEnabled = true) @FieldDefaults(level = AccessLevel....
Kornext's user avatar
  • 45
0 votes
0 answers
5 views

How can I set the client access type to confidential in Keycloak 20.0.3?

Where can I set the client access type (as confidential) in the keyclock 20.0.3 ? I am not able to find a option to set the access type. When creating a client, there is no option also after creation, ...
Dhairya Sonaiya's user avatar
0 votes
0 answers
14 views

Angular Keycloak setup not working in Microsoft Edge (Third party Cookies)

I have a very weird problem with an angular application that uses keycloak for authentication. When using Edge, direct-links and page refresh always redirect to the main site of the app. But a direct ...
Martin Pichler's user avatar
0 votes
0 answers
18 views

Introspect endpoint with Oauth2 authorization token not working

I am having difficulties making an introspect call to the endpoint using an Oauth 2 token of a client. The client is confidential and the call works fine if I use the basic auth username and password. ...
Lorenzo Massa's user avatar
0 votes
0 answers
34 views

How to get single client session logout in a realm in keycloak? [closed]

While I am trying to logout client 1, it is not working for a particular client, and it is working for client 1 and client 2 at a time, I think it is based upon user session. So please help me out of ...
sekhar gottapu's user avatar
0 votes
0 answers
12 views

Client role not assigned to the user authenticated with it

I have two custom roles I need to assign to the users ROLE_USER and ROLE_CLIENT. And there are 2 clients A and B. The goal is to assign roles to users automatically, depending on what auth type they ...
Serge P's user avatar
  • 1,854
-1 votes
0 answers
15 views

Kafka with keycloak authorization

I have Spring Boot microservice with kafka comsumer and producer. My problem's secure broker conversation using Keycloak. I found some github repos like https://github.com/strimzi/strimzi-kafka-oauth ...
MrLebovsky's user avatar
0 votes
0 answers
14 views

integrante keycloak with angular

I need some help, I need to integrate a simple web environment with authentication via keycloak, I already have all the data, I performed tests using postman and I manage to generate the access token ...
Victor Seiti's user avatar
-1 votes
1 answer
45 views

Keycloak spring-boot spring-security spring-security-oauth2 error 401

Keycloak spring-boot spring-security spring-security-oauth2 Schema: EurekaServer - Spring Cloud Gateway - Microservices Hello, I am doing a project using springBoot 2.7.11 and Keycloak 18.0.0 for ...
Andreat's user avatar
0 votes
1 answer
13 views

Oidc-client-js getUser() from Keycloak connection after user log-in

I'm trying with Vue 3 Application to get out Userinfo from Keycloak on Docker. Everything works fine but I really can't understand how to be authenticated or how to use ( or take out... ) an access ...
Alessio Maria's user avatar
0 votes
0 answers
32 views

Is there a way to allow the user to manage his data with a REST API call in Keycloak? [duplicate]

The aim is to have a Spring resource server and a Next.js client (with next-auth). Going to the user's profile, the user can edit his username, password etc. Is there a way for the user to use the ...
SzymanskiFilip's user avatar
0 votes
0 answers
5 views

Is possible the integration between Keycloak and NetIQ Access Manager with SAML protocol

I'm working on a project that includes AWS ec2, Amazon Connect, Keycloak, and NetIQ Access Manager. At this moment I successfully created a SSO mechanism to connect users to Amazon Connect by using ...
Felice Coppola's user avatar
-1 votes
0 answers
22 views

facing issue with token timeout in nextjs & keycloak [closed]

I’m facing issue with token timeout in nextjs. I’ve used keycloak as an auth provider. basically I won’t to sync auth token idle time with keycloak token. Either way if I can stop idle time in nextjs ...
Parth empyreal's user avatar
0 votes
0 answers
9 views

Failure to get Active directory user list in Keycloak with a Ping Federate OpenID connector

Software version : KeyCloak 15.0.2 Configuration : One realm active : Enabled option set "on" Client Protocol is "OpenID-Connect" Access type is "public" standard Flow ...
Egg_Greg_4n's user avatar
0 votes
1 answer
43 views

How can I read a value from header in Azure API Management and pass it to a path param in keycloak realm?

Read value from header in api policy and pass it to api path param in azure policy Hi I have a requirement where I use keycloak to authenticate my urls. Below is my policy <policies> <...
Sindhu1990's user avatar
0 votes
0 answers
36 views

How can I fix "Invalid URLS error" when using SpringBoot adapter and KeyCloak with AWS Application Load Balancer?

Hi I am having a problem with SSL termination for SpringBoot adapter and KeyCloak. I am using KeyCloak 15.1.1 Before implementing SSL, everything works fine with HTTP. The headache comes when I ...
ko185032's user avatar
0 votes
0 answers
22 views

Keycloak auth request returning 401 error even after successful login and redirect - React JS

After log in with credentials and being redirected back to my website, keycloak request returns 401. Note! Im running keycloak locally using docker container This is my code for handling auth within ...
Stefan's user avatar
  • 1
2 votes
1 answer
30 views

How to remove "account" from aud claim in KeyCloak?

I created in the latest Keycloak version using the Admin UI a new client and a user and Evaluate the Client Scopes directly. In the generated access token we can see: "iss": "..." &...
Jeroen Heier's user avatar
  • 3,460
0 votes
1 answer
32 views

"The iss claim is not valid" JWT from keycloak behind ingress

Short description I am creating whole environment for some microservices. I have REST API written in Java with spring boot. I am also using keycloak as identity provider. I put them both in kubernetes ...
aFku's user avatar
  • 37
0 votes
0 answers
18 views

How to migrate mysql user data to keycloak

how can i migrate mysql user data to keycloak I want to keycloak migrate mysql user data. After some research, I came across such a plugin. [https://github.com/daniel-frak/keycloak-user-migration](...
osmind's user avatar
  • 1
0 votes
0 answers
36 views

Keycloak Error while authenticating with Microsoft Identity Provider

We have configured keycloak version 21.0.1 under Azure load balancer with 2 Linux virtual machines and it is using the same database. While authenticating using Microsoft Identity Provider it works ...
Sreejith R's user avatar
0 votes
0 answers
12 views

AWS ALB - proper handling Client Login Timeout when using Keycloak IDP

we have a web app deployed in AWS ECS behind Application Load Balancer. We have configured the Application Load Balancer to securely authenticate users as they access our applications and as the IDP ...
Donarus's user avatar
  • 53
0 votes
1 answer
26 views

Retrieving user's groups from Keycloak via pac4j library

I'm protecting a JavaEE running on Tomcat with the library javaee-pac4j with an OpenID Connect flow (with library pac4j-oidc) that is managed by a Keycloak istance. After a successful login in ...
Arrigo Pierotti's user avatar
0 votes
0 answers
14 views

SSO access to Kibana with Apache2 and Keycloak

for the couple of weeks I have been puzzling over the implementation of the sso for kibana with the keycloack and apache, all the time I get random errors, but I can’t get on the right path.. there is ...
Maksym's user avatar
  • 31
0 votes
0 answers
23 views

Connection refused when trying to send an event from keycloak

I am trying to send an event from a keycloak to an endpoint to another microservice, when i try SimpleHttp.doPost() returns me connection refused. The endpoint itself works fine, so there must be ...
pawello12's user avatar
0 votes
0 answers
24 views

ASP.NET Core Web API + Keycloak Authorization + Excel or PowerBI OData feed organisational account

We have developed set of OData APIs and for authorization, we are using Keycloak. We want to call that API in OData feed with an organisational account. We tried to authorize API with OData feed ...
Girish's user avatar
  • 9
0 votes
0 answers
16 views

How to manage and version Keycloak config evolutions?

I have the following use case that has been bugging me for... well years now. I'm using Keycloak as a SSO for multiple applications. Each time I create a new application it is registered as a new ...
Crystark's user avatar
  • 3,663
0 votes
0 answers
18 views

Keycloak SSO change user

I have set up Keycloak using Microsoft and Google SSO. The system, allows users that already have an account in key cloak to login, else they are rejected. The login flow asks for the username first, ...
mrobin's user avatar
  • 1
0 votes
0 answers
15 views

Allow keycloak user login through a client when user is already logged in through a different client

I have a two clients in keycloak client1 and client2. client1 doesn't have a authentication and client2 have authentication. My FE app connects to client1 and BE connects client2. A userlogged in ...
arunken's user avatar
  • 405
0 votes
1 answer
30 views

Keycloak 20 infinispan cache configuration not recognising nodes in HA mode

I have 3 nodes running in HA mode. I enabled infinispan caching for keycloak and provided caching configuration as below in keycloak.conf. cache=ispn cache-config-file=keycloak-cache.xml jgroups....
Varun's user avatar
  • 25
0 votes
1 answer
48 views

Sharing Keycloak users database with Spring Boot resource server

I would like to use Keycloak with a spring boot resource server. I would like to have endpoints which return the users data. For example getting the users email from the Authentication object, and ...
SzymanskiFilip's user avatar
0 votes
0 answers
13 views

Keycloak with Identity Provider(OIDC)

I have 2 questions: I'm using Keycloak identity provider function and I've integrated Keycloak to UAE Pass app, It's working). Keycloak requests to userinfo URL(sets UAE Pass token to header) and ...
Sardor Shorahimov's user avatar
0 votes
0 answers
36 views

Configure Keycloak TLS to use Trusted Platform Module (TPM) private key

I'm trying to configure Keycloak TLS using a self signed certificate, the private key of which is stored in TPM (Trusted Platform Module). So I have the certificate PEM file, but I don't have the ...
Zohrab Broyan's user avatar
0 votes
1 answer
18 views

Keycloak unable to login - removed totp credentials

In keycloak master realm we had 2 credentials for admin user, one is password and another is totp. I have accidentally deleted the totp credentials. Now when I am trying to login after username/...
Naveen Subramanian's user avatar
0 votes
0 answers
16 views

Resource vs Permission while authorizing user to a resource in Keycloak

I am trying to authorize users to a resource in keycloak using resource-based permission. using this documentation, I can make an API call to keycloak to know whether a particular user is authorized ...
Aman Godara's user avatar
0 votes
0 answers
22 views

Is it possible to run keycloak (15.0.2) in terminal without standalone.sh?

I have downloaded the keycloak 15.0.2 version from its official document: ‘Central Repository: org/keycloak/keycloak-dist-downloads/15.0.2’ and then I open that code on VS Code. I print some logs in ...
Sonu jha's user avatar
0 votes
0 answers
8 views

Integrating Keycloak with React using OIDC-Client and encountering a 404 error upon login page. What am I missing in the server portal configuration?

oidc-client 404 page not found i was try to integrate keycloack react using oidc-client library , the code below is my configuration with oidc-client const settings = { authority: "http://...
Abdul zany's user avatar
0 votes
0 answers
18 views

Keycloak Refresh Token implementation with ReactJS

Current tech stack: ReactJS, Nginx, SpringBoot, Keycloak. Earlier in place of nginx, Node+Redis was used to implement refresh token. Old Implementation: if user is active, before expiry time of 5/10 ...
Tusar's user avatar
  • 757
0 votes
0 answers
22 views

ASP.NET Core MVC : Keycloak error on Signin-oidc

I use keycloak in an ASP.NET Core 7.0 MVC app, but when I go in the login page I get this error: Exception: OpenIdConnectAuthenticationHandler: message.State is null or empty. Exception: An error was ...
FedeC87p's user avatar
  • 141

1
2 3 4 5
143